@xemahq/llm-registry-api-client 0.8.13 → 0.10.1

package/dist/custom-fetch.d.ts

@@ -1,11 +1,21 @@
 /**
  * Configurable fetch wrapper for Orval-generated clients.
  *
- * GENERATED by `@xemahq/api-client-generator` — do not edit. Every client in
- * the fleet ships this file byte-for-byte; a local edit is erased by the next
- * `pnpm refresh` and, until then, makes this one client speak to the platform
- * differently from all of its siblings. Change the template instead:
- * `api-client-generator/src/lib/custom-fetch-template.ts`.
+ * AUTO-GENERATED by `@xemahq/api-client-generator` — DO NOT EDIT. Every client
+ * in the fleet ships this file byte-for-byte; a hand edit is erased by the next
+ * regeneration and, until then, makes this one client speak to the platform
+ * differently from all of its siblings.
+ *
+ * Canonical source: `CANONICAL_CUSTOM_FETCH` in
+ * `packages/sdks/api-client-generator/src/lib/custom-fetch-template.ts`
+ * (repository `xema-kernel-sdk`). Change it there.
+ *
+ * Regenerate, from the root of THIS repository:
+ *   pnpm --filter <owning-service> run openapi
+ *   pnpm --filter <owning-service> run client:generate
+ * A mirror of this client under `xema-host-web` is not regenerated there: it
+ * is written by the frontend bridge, `tooling/frontend-bridge` in the
+ * xema-monorepo aggregator.
  *
  * Consumers must call `configureClient()` before using any endpoint function.
  * The baseUrl is prepended to the relative paths generated by Orval.
@@ -31,6 +41,21 @@ export interface RetryNotice {
     /** HTTP method being re-requested. */
     method: string;
 }
+/**
+ * Per-request context handed to the callbacks this transport awaits BEFORE it
+ * sends the request.
+ *
+ * `signal` is the request's own `AbortSignal` (`options.signal`). It is the
+ * CALLER's cancellation: a callback may use it to stop work that is private to
+ * this request, but a callback serving several requests from one shared,
+ * single-flight acquisition (a token refresh) must NOT abort that shared work
+ * because one caller stopped — every other caller waiting on it would fail.
+ * The transport stops WAITING on its own regardless, so a callback that
+ * ignores the signal still cannot hold an aborted request.
+ */
+export interface ClientCallbackOptions {
+    signal?: AbortSignal;
+}
 export interface ClientConfig {
     /**
      * Static base URL (e.g. 'http://localhost:3140') — no trailing slash.
@@ -42,9 +67,13 @@ export interface ClientConfig {
      * the service registry on EVERY request (boot-order-safe). Wired by
      * `configureOrvalClientResolved` from `@xemahq/platform-common`.
      */
-    baseUrlResolver?: () => string | Promise<string>;
-    /** Optional async callback to get an auth token. Auto-sets Authorization header on every request. */
-    getAuthToken?: () => Promise<string>;
+    baseUrlResolver?: (options?: ClientCallbackOptions) => string | Promise<string>;
+    /**
+     * Optional async callback to get an auth token. Auto-sets Authorization
+     * header on every request. Receives the request's signal — see
+     * {@link ClientCallbackOptions} for what it may and may not abort.
+     */
+    getAuthToken?: (options?: ClientCallbackOptions) => Promise<string>;
     /** Optional callback returning headers to inject on every request. Per-call headers take precedence. */
     getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
     /**

package/dist/custom-fetch.js

@@ -2,11 +2,21 @@
 /**
  * Configurable fetch wrapper for Orval-generated clients.
  *
- * GENERATED by `@xemahq/api-client-generator` — do not edit. Every client in
- * the fleet ships this file byte-for-byte; a local edit is erased by the next
- * `pnpm refresh` and, until then, makes this one client speak to the platform
- * differently from all of its siblings. Change the template instead:
- * `api-client-generator/src/lib/custom-fetch-template.ts`.
+ * AUTO-GENERATED by `@xemahq/api-client-generator` — DO NOT EDIT. Every client
+ * in the fleet ships this file byte-for-byte; a hand edit is erased by the next
+ * regeneration and, until then, makes this one client speak to the platform
+ * differently from all of its siblings.
+ *
+ * Canonical source: `CANONICAL_CUSTOM_FETCH` in
+ * `packages/sdks/api-client-generator/src/lib/custom-fetch-template.ts`
+ * (repository `xema-kernel-sdk`). Change it there.
+ *
+ * Regenerate, from the root of THIS repository:
+ *   pnpm --filter <owning-service> run openapi
+ *   pnpm --filter <owning-service> run client:generate
+ * A mirror of this client under `xema-host-web` is not regenerated there: it
+ * is written by the frontend bridge, `tooling/frontend-bridge` in the
+ * xema-monorepo aggregator.
  *
  * Consumers must call `configureClient()` before using any endpoint function.
  * The baseUrl is prepended to the relative paths generated by Orval.
@@ -77,6 +87,11 @@ class ClientError extends Error {
         // identity marker, not payload.
         Object.defineProperty(this, CLIENT_ERROR_BRAND, { value: true });
     }
+    // `override` because the member shadows `Function.prototype[Symbol.hasInstance]`,
+    // which a class constructor inherits: TypeScript 5.9+ reports TS4114 without it
+    // under `noImplicitOverride`. Measured to compile on 5.5.4, 5.9.3, 6.0.3 and
+    // 7.0.2 with the flag on AND off — pinned by
+    // tests/custom-fetch-compiles-standalone.test.cjs.
     static [Symbol.hasInstance](candidate) {
         return (typeof candidate === 'object' &&
             candidate !== null &&
@@ -85,6 +100,50 @@ class ClientError extends Error {
 }
 exports.ClientError = ClientError;
 let clientConfig = null;
+/**
+ * THE MOUNT SCOPE — how one process can host several services without their
+ * clients speaking for each other.
+ *
+ * `clientConfig` below is a MODULE global, and in a single-service process
+ * that is correct: one writer, one configuration. Compose two services into one
+ * process and both call `configureClient` on THIS SAME module instance, so the
+ * second overwrites the first and every outbound call from BOTH services leaves
+ * as whichever wired itself last — wrong base URL, and, because
+ * `getAuthToken` is part of the config, WRONG BEARER. That is one tenant's
+ * service calling a peer holding another tenant's credential, and it is silent.
+ *
+ * A composing host installs a hook under this well-known symbol that answers
+ * one question: WHICH MOUNT is currently on the stack. Nothing else crosses.
+ * `configureClient` then files the config under that mount, and
+ * `getClientConfig` reads it back out under the same key.
+ *
+ * Three properties make this safe rather than clever:
+ *
+ *   - The CONFIG is still built by the mount's own wiring, exactly as today.
+ *     The hook never supplies one. So a mount's base URL and bearer are
+ *     resolved FROM THE MOUNT; the scope only decides which drawer they go in.
+ *     A hook that RETURNED configuration would be a mount taking its identity
+ *     from ambient storage a neighbour can write — the inversion to refuse.
+ *   - The key is an OPAQUE OBJECT and the store is a `WeakMap`, so a mount's
+ *     configuration becomes unreachable when the host drops the mount, and no
+ *     client can enumerate the mounts or reach a sibling's entry.
+ *   - With NO hook installed — every process in the fleet today — both
+ *     functions behave exactly as they did before this existed.
+ *
+ * `Symbol.for` is the seam because a generated client must keep its
+ * dependency surface at zero and a host cannot enumerate the clients a process
+ * happens to load. It is the same instrument, and the same reasoning, as the
+ * `ClientError` brand above.
+ */
+const XEMA_CLIENT_CONFIG_SCOPE = Symbol.for('xema.client-config-scope');
+function mountScopeHook() {
+    const hook = globalThis[XEMA_CLIENT_CONFIG_SCOPE];
+    return typeof hook === 'function' ? hook : undefined;
+}
+function currentMountKey() {
+    return mountScopeHook()?.();
+}
+const perMountConfig = new WeakMap();
 function configureClient(config) {
     // Fail at WIRING time, not on the request that happens to be retried. A
     // client configured to retry without an observer is the exact defect this
@@ -94,9 +153,38 @@ function configureClient(config) {
             'reports is indistinguishable from a slow server, which is how two ' +
             'silent re-attempts were read as a 3,312ms call.');
     }
+    const hook = mountScopeHook();
+    if (hook !== undefined) {
+        const mount = hook();
+        if (mount === undefined) {
+            // A composing host is installed and no member is on the stack, so this
+            // configuration belongs to NO member. Filing it in the module global
+            // would hand it to every member that did not configure this client —
+            // someone else's base URL and bearer, silently.
+            throw new Error('configureClient: called in a composed process outside every member. ' +
+                'Configure the client inside the member that uses it (its providers ' +
+                'and factories already run there).');
+        }
+        perMountConfig.set(mount, config);
+        return;
+    }
     clientConfig = config;
 }
 function getClientConfig() {
+    const mount = currentMountKey();
+    if (mount !== undefined) {
+        const scoped = perMountConfig.get(mount);
+        if (scoped) {
+            return scoped;
+        }
+        // A member that never configured THIS client behaves exactly like a
+        // dedicated service that did not either: it is refused. It used to fall
+        // through to the module global, which in a composed process can only have
+        // been written by some OTHER code — so the member called peers under a
+        // base URL and bearer that were never its own.
+        throw new Error('Client not configured for this member. Call configureClient({ baseUrl }) ' +
+            'inside the member before using endpoint functions.');
+    }
     if (!clientConfig) {
         throw new Error('Client not configured. Call configureClient({ baseUrl }) before using endpoint functions.');
     }
@@ -155,11 +243,64 @@ const CORRELATION_ID_HEADER = 'X-Correlation-Id';
 const BASE_BACKOFF_MS = 1000;
 /** Ceiling on a single backoff, however many attempts have elapsed. */
 const MAX_BACKOFF_MS = 30_000;
-async function buildHeaders(config, callerHeaders) {
+/*
+ * CALLER CANCELLATION REACHES EVERY WAIT BEFORE THE REQUEST IS SENT.
+ *
+ * `fetch` always honoured `options.signal`, but everything this transport
+ * awaits BEFORE `fetch` — base-URL resolution, the header callbacks, the auth
+ * token — did not, so a caller that aborted while a token was being minted sat
+ * out the mint and then, at best, had its request refused. The only way to
+ * cancel that wait was a process-wide interceptor aborting every outbound
+ * request, which also aborts a SHARED single-flight token refresh and so fails
+ * every other caller waiting on it.
+ *
+ * So each pre-send wait is RACED against the signal: the caller stops waiting
+ * at once, and the work it was waiting on carries on for anybody else. The
+ * rejection is the signal's own reason — exactly what `fetch` rejects with —
+ * so a caller sees ONE abort shape whenever it aborts. An aborted request is
+ * never retried. Without a signal nothing here changes.
+ */
+function abortedReason(signal) {
+    // `abort()` with no argument sets a DOMException reason, so this is only
+    // ever `undefined` for a hand-built signal; say so rather than throw it.
+    return signal.reason ?? new DOMException('This operation was aborted', 'AbortError');
+}
+function throwIfAborted(signal) {
+    if (signal?.aborted) {
+        throw abortedReason(signal);
+    }
+}
+function raceAbort(pending, signal) {
+    const promise = Promise.resolve(pending);
+    if (!signal) {
+        return promise;
+    }
+    if (signal.aborted) {
+        promise.catch(() => undefined);
+        return Promise.reject(abortedReason(signal));
+    }
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            // The pending work may be shared; it carries on, and its eventual
+            // rejection must not surface as an unhandled one on this side.
+            promise.catch(() => undefined);
+            reject(abortedReason(signal));
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+        promise.then((value) => {
+            signal.removeEventListener('abort', onAbort);
+            resolve(value);
+        }, (err) => {
+            signal.removeEventListener('abort', onAbort);
+            reject(err);
+        });
+    });
+}
+async function buildHeaders(config, callerHeaders, signal) {
     const headers = new Headers(callerHeaders);
     // Global headers from config (caller-provided headers take precedence)
     if (config.getHeaders) {
-        const globalHeaders = await Promise.resolve(config.getHeaders());
+        const globalHeaders = await raceAbort(config.getHeaders(), signal);
         for (const [key, value] of Object.entries(globalHeaders)) {
             if (!headers.has(key)) {
                 headers.set(key, value);
@@ -178,14 +319,14 @@ async function buildHeaders(config, callerHeaders) {
     // receiver mints and a new trace begins, which is the truthful outcome when
     // there is nothing to continue.
     if (config.getCorrelationId && !headers.has(CORRELATION_ID_HEADER)) {
-        const correlationId = await Promise.resolve(config.getCorrelationId());
+        const correlationId = await raceAbort(config.getCorrelationId(), signal);
         if (correlationId) {
             headers.set(CORRELATION_ID_HEADER, correlationId);
         }
     }
     // Auth token (caller or global headers take precedence)
     if (config.getAuthToken && !headers.has('Authorization')) {
-        const token = await config.getAuthToken();
+        const token = await raceAbort(config.getAuthToken(signal ? { signal } : undefined), signal);
         headers.set('Authorization', `Bearer ${token}`);
     }
     return headers;
@@ -215,8 +356,10 @@ async function buildHeaders(config, callerHeaders) {
  */
 const customFetch = async (url, options) => {
     const config = getClientConfig();
+    const signal = options.signal ?? undefined;
+    throwIfAborted(signal);
     const base = config.baseUrlResolver
-        ? await config.baseUrlResolver()
+        ? await raceAbort(config.baseUrlResolver(signal ? { signal } : undefined), signal)
         : config.baseUrl;
     if (base === undefined) {
         throw new Error('Client not configured: set baseUrl or baseUrlResolver via configureClient().');
@@ -228,7 +371,7 @@ const customFetch = async (url, options) => {
     // re-sending would replay the identical failing request with the identical
     // credential: one wasted round trip, plus a global refresh nobody asked for.
     const callerSuppliedAuth = new Headers(options.headers).has('Authorization');
-    const headers = await buildHeaders(config, options.headers);
+    const headers = await buildHeaders(config, options.headers, signal);
     const requestInit = { ...options, headers };
     let delay = BASE_BACKOFF_MS;
     for (let attempt = 0;; attempt++) {
@@ -237,8 +380,8 @@ const customFetch = async (url, options) => {
             config.onUnauthorized &&
             !callerSuppliedAuth &&
             attempt === 0) {
-            await config.onUnauthorized();
-            const refreshedHeaders = await buildHeaders(config, options.headers);
+            await raceAbort(config.onUnauthorized(), signal);
+            const refreshedHeaders = await buildHeaders(config, options.headers, signal);
             const retryResponse = await fetch(fullUrl, {
                 ...options,
                 headers: refreshedHeaders,
@@ -270,7 +413,7 @@ const customFetch = async (url, options) => {
             url: fullUrl,
             method: options.method ?? 'GET',
         });
-        await sleep(waitMs);
+        await sleep(waitMs, signal);
         delay = Math.min(delay * 2, MAX_BACKOFF_MS);
     }
 };
@@ -351,7 +494,24 @@ function parseRetryAfter(value) {
 function addJitter(delay) {
     return delay + (Math.random() * 2 - 1) * delay * 0.25;
 }
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
+/** A retry backoff; the caller's signal ends it at once and is never retried. */
+function sleep(ms, signal) {
+    if (!signal) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+    if (signal.aborted) {
+        return Promise.reject(abortedReason(signal));
+    }
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(abortedReason(signal));
+        };
+        const timer = setTimeout(() => {
+            signal.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
 }
 exports.default = exports.customFetch;

package/dist/endpoints/model-strategies/model-strategies.d.ts

@@ -3,7 +3,7 @@
  * LLM Registry API
  * OpenAPI spec version: 0.1.3
  */
-import type { BindModelStrategyDto, CreateModelStrategyDto, ModelStrategyControllerGetProjectBinding200, ModelStrategyResponseDtoDataArrayEnvelope, ModelStrategyResponseDtoDataEnvelope, OrgDefaultStrategyStatusResponseDtoDataEnvelope, ProjectModelStrategyBindingResponseDtoDataEnvelope, StrategyDeletionImpactResponseDtoDataEnvelope, StrategyTemplateResponseDtoDataArrayEnvelope, UpdateModelStrategyDto, UpsertModelStrategyEntriesDto } from '../../models';
+import type { BindModelStrategyDto, CreateModelStrategyDto, ModelStrategyControllerGetProjectBinding200, ModelStrategyResponseDtoDataArrayEnvelope, ModelStrategyResponseDtoDataEnvelope, OrgDefaultStrategyStatusResponseDtoDataEnvelope, ProjectModelStrategyBindingResponseDtoDataEnvelope, StrategyDeletionImpactResponseDtoDataEnvelope, StrategyTemplateResponseDtoDataArrayEnvelope, UpdateModelStrategyDto, UpsertModelStrategyEntriesDto, UpsertModelStrategyEntryDto } from '../../models';
 export declare const getModelStrategyControllerCreateStrategyUrl: () => string;
 /**
  * @summary Create a model strategy
@@ -54,6 +54,16 @@ export declare const getModelStrategyControllerUpsertEntriesUrl: (id: string) =>
  * @summary Replace all strategy entries
  */
 export declare const modelStrategyControllerUpsertEntries: (id: string, upsertModelStrategyEntriesDto: UpsertModelStrategyEntriesDto, options?: RequestInit) => Promise<ModelStrategyResponseDtoDataEnvelope>;
+export declare const getModelStrategyControllerUpsertEntryUrl: (id: string, lane: string) => string;
+/**
+ * @summary Bind one model lane, leaving every other lane untouched
+ */
+export declare const modelStrategyControllerUpsertEntry: (id: string, lane: string, upsertModelStrategyEntryDto: UpsertModelStrategyEntryDto, options?: RequestInit) => Promise<ModelStrategyResponseDtoDataEnvelope>;
+export declare const getModelStrategyControllerDeleteEntryUrl: (id: string, lane: string) => string;
+/**
+ * @summary Clear one model lane, so it falls back to the default binding
+ */
+export declare const modelStrategyControllerDeleteEntry: (id: string, lane: string, options?: RequestInit) => Promise<ModelStrategyResponseDtoDataEnvelope>;
 export declare const getModelStrategyControllerBindStrategyUrl: (projectId: string) => string;
 /**
  * @summary Bind a model strategy to a project

package/dist/endpoints/model-strategies/model-strategies.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.modelStrategyControllerUnbindStrategy = exports.getModelStrategyControllerUnbindStrategyUrl = exports.modelStrategyControllerGetProjectBinding = exports.getModelStrategyControllerGetProjectBindingUrl = exports.modelStrategyControllerBindStrategy = exports.getModelStrategyControllerBindStrategyUrl = exports.modelStrategyControllerUpsertEntries = exports.getModelStrategyControllerUpsertEntriesUrl = exports.modelStrategyControllerGetStrategyDeletionImpact = exports.getModelStrategyControllerGetStrategyDeletionImpactUrl = exports.modelStrategyControllerDeleteStrategy = exports.getModelStrategyControllerDeleteStrategyUrl = exports.modelStrategyControllerUpdateStrategy = exports.getModelStrategyControllerUpdateStrategyUrl = exports.modelStrategyControllerGetStrategy = exports.getModelStrategyControllerGetStrategyUrl = exports.modelStrategyControllerAdoptTemplate = exports.getModelStrategyControllerAdoptTemplateUrl = exports.modelStrategyControllerListTemplates = exports.getModelStrategyControllerListTemplatesUrl = exports.modelStrategyControllerGetOrgDefaultStatus = exports.getModelStrategyControllerGetOrgDefaultStatusUrl = exports.modelStrategyControllerListStrategies = exports.getModelStrategyControllerListStrategiesUrl = exports.modelStrategyControllerCreateStrategy = exports.getModelStrategyControllerCreateStrategyUrl = void 0;
+exports.modelStrategyControllerUnbindStrategy = exports.getModelStrategyControllerUnbindStrategyUrl = exports.modelStrategyControllerGetProjectBinding = exports.getModelStrategyControllerGetProjectBindingUrl = exports.modelStrategyControllerBindStrategy = exports.getModelStrategyControllerBindStrategyUrl = exports.modelStrategyControllerDeleteEntry = exports.getModelStrategyControllerDeleteEntryUrl = exports.modelStrategyControllerUpsertEntry = exports.getModelStrategyControllerUpsertEntryUrl = exports.modelStrategyControllerUpsertEntries = exports.getModelStrategyControllerUpsertEntriesUrl = exports.modelStrategyControllerGetStrategyDeletionImpact = exports.getModelStrategyControllerGetStrategyDeletionImpactUrl = exports.modelStrategyControllerDeleteStrategy = exports.getModelStrategyControllerDeleteStrategyUrl = exports.modelStrategyControllerUpdateStrategy = exports.getModelStrategyControllerUpdateStrategyUrl = exports.modelStrategyControllerGetStrategy = exports.getModelStrategyControllerGetStrategyUrl = exports.modelStrategyControllerAdoptTemplate = exports.getModelStrategyControllerAdoptTemplateUrl = exports.modelStrategyControllerListTemplates = exports.getModelStrategyControllerListTemplatesUrl = exports.modelStrategyControllerGetOrgDefaultStatus = exports.getModelStrategyControllerGetOrgDefaultStatusUrl = exports.modelStrategyControllerListStrategies = exports.getModelStrategyControllerListStrategiesUrl = exports.modelStrategyControllerCreateStrategy = exports.getModelStrategyControllerCreateStrategyUrl = void 0;
 const custom_fetch_1 = require("../../custom-fetch");
 const getModelStrategyControllerCreateStrategyUrl = () => {
     return `/model-strategies`;
@@ -148,6 +148,36 @@ const modelStrategyControllerUpsertEntries = async (id, upsertModelStrategyEntri
     });
 };
 exports.modelStrategyControllerUpsertEntries = modelStrategyControllerUpsertEntries;
+const getModelStrategyControllerUpsertEntryUrl = (id, lane) => {
+    return `/model-strategies/${id}/entries/${lane}`;
+};
+exports.getModelStrategyControllerUpsertEntryUrl = getModelStrategyControllerUpsertEntryUrl;
+/**
+ * @summary Bind one model lane, leaving every other lane untouched
+ */
+const modelStrategyControllerUpsertEntry = async (id, lane, upsertModelStrategyEntryDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getModelStrategyControllerUpsertEntryUrl)(id, lane), {
+        ...options,
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(upsertModelStrategyEntryDto)
+    });
+};
+exports.modelStrategyControllerUpsertEntry = modelStrategyControllerUpsertEntry;
+const getModelStrategyControllerDeleteEntryUrl = (id, lane) => {
+    return `/model-strategies/${id}/entries/${lane}`;
+};
+exports.getModelStrategyControllerDeleteEntryUrl = getModelStrategyControllerDeleteEntryUrl;
+/**
+ * @summary Clear one model lane, so it falls back to the default binding
+ */
+const modelStrategyControllerDeleteEntry = async (id, lane, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getModelStrategyControllerDeleteEntryUrl)(id, lane), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.modelStrategyControllerDeleteEntry = modelStrategyControllerDeleteEntry;
 const getModelStrategyControllerBindStrategyUrl = (projectId) => {
     return `/projects/${projectId}/model-strategy`;
 };

package/dist/models/agentCapabilitySetExpressionDto.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+export interface AgentCapabilitySetExpressionDto {
+    include: string[];
+    exclude: string[];
+}

package/dist/models/agentCapabilitySetExpressionDto.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/agentNodeDto.d.ts

@@ -4,6 +4,7 @@
  * OpenAPI spec version: 0.1.3
  */
 import type { AgentBiomeAvailabilityDto } from './agentBiomeAvailabilityDto.js';
+import type { AgentCapabilitySetExpressionDto } from './agentCapabilitySetExpressionDto.js';
 import type { AgentModelOverrideDto } from './agentModelOverrideDto.js';
 import type { AgentNodeDtoPermission } from './agentNodeDtoPermission.js';
 import type { AgentNodeDtoPromptMode } from './agentNodeDtoPromptMode.js';
@@ -31,6 +32,15 @@ export interface AgentNodeDto {
        * Mirrors the kernel `BiomeAvailabilityScoped` mixin on `AgentNode`.
        */
     biomeAvailability?: AgentBiomeAvailabilityDto;
+    /**
+       * DELEGATION BOUNDARY — a ceiling on the authority this node may be granted
+       * by the agent that delegates to it (kernel `AgentNode.delegationBoundary`).
+       * `effective(this) = effective(parent) ∩ own(this) ∩ delegationBoundary`;
+       * absent ⇒ no ADDITIONAL attenuation — the parent's authority still bounds
+       * this node. Meaningless on the ROOT node (nothing delegates to it) and
+       * refused there by `AgentNodeValidator`.
+       */
+    delegationBoundary?: AgentCapabilitySetExpressionDto;
     /**
        * Server-stamped, resolve-only: SHA-256 of the STABLE revision of the agent this node references. Rejected on write.
        * @pattern ^[a-f0-9]{64}$

package/dist/models/delegatedAgentRefDto.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+export interface DelegatedAgentRefDto {
+    slug: string;
+    /** Generated revision number (decimal string). */
+    version: string;
+}

package/dist/models/delegatedAgentRefDto.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/delegatedAgentSubjectDto.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+import type { DelegatedAgentSubjectDtoKind } from './delegatedAgentSubjectDtoKind.js';
+export interface DelegatedAgentSubjectDto {
+    kind: DelegatedAgentSubjectDtoKind;
+    id: string;
+}

package/dist/models/delegatedAgentSubjectDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/delegatedAgentSubjectDtoKind.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+export type DelegatedAgentSubjectDtoKind = typeof DelegatedAgentSubjectDtoKind[keyof typeof DelegatedAgentSubjectDtoKind];
+export declare const DelegatedAgentSubjectDtoKind: {
+    readonly agent: "agent";
+};

package/dist/models/delegatedAgentSubjectDtoKind.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DelegatedAgentSubjectDtoKind = void 0;
+exports.DelegatedAgentSubjectDtoKind = {
+    agent: 'agent',
+};

package/dist/models/delegatedApertureConstraintsDto.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+import type { AgentCapabilityApertureDto } from './agentCapabilityApertureDto.js';
+import type { AgentCapabilitySetExpressionDto } from './agentCapabilitySetExpressionDto.js';
+export interface DelegatedApertureConstraintsDto {
+    apertures: AgentCapabilityApertureDto[];
+    boundaries: AgentCapabilitySetExpressionDto[];
+}

package/dist/models/delegatedApertureConstraintsDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/exactAgentRevisionAuthorityResponseDto.d.ts

@@ -7,6 +7,7 @@ import type { AgentCapabilityApertureDto } from './agentCapabilityApertureDto.js
 import type { AgentOwnerSpaceRefDto } from './agentOwnerSpaceRefDto.js';
 import type { ExactAgentRevisionAuthorityResponseDtoReachTier } from './exactAgentRevisionAuthorityResponseDtoReachTier.js';
 import type { ExactAgentRevisionResolvedGraphDto } from './exactAgentRevisionResolvedGraphDto.js';
+import type { ResolvedDelegatedApertureDto } from './resolvedDelegatedApertureDto.js';
 export interface ExactAgentRevisionAuthorityResponseDto {
     resourceId: string;
     revisionId: string;
@@ -16,4 +17,12 @@ export interface ExactAgentRevisionAuthorityResponseDto {
     resolvedGraph: ExactAgentRevisionResolvedGraphDto;
     capabilityAperture: AgentCapabilityApertureDto;
     reachTier: ExactAgentRevisionAuthorityResponseDtoReachTier;
+    /**
+       * Every agent reachable by DELEGATION from the primary agent (composition
+       * children and intrinsic delegates, cycles resolved to a fixed point,
+       * bounded by the platform delegation depth), each with its effective
+       * authority `parent ∩ own ∩ boundary`. Sorted by `agentKey`; exactly one
+       * entry (the primary agent) has a null parent.
+       */
+    delegatedApertures: ResolvedDelegatedApertureDto[];
 }

package/dist/models/index.d.ts

@@ -13,6 +13,7 @@ export * from './agentCapabilityApertureDtoKind';
 export * from './agentCapabilityLayerDto';
 export * from './agentCapabilityLayerDtoMayEditRepos';
 export * from './agentCapabilityLayerDtoWritePolicy';
+export * from './agentCapabilitySetExpressionDto';
 export * from './agentConfigBlockDto';
 export * from './agentConfigBlockDtoColor';
 export * from './agentConfigBlockDtoPermission';
@@ -134,6 +135,10 @@ export * from './createProviderDto';
 export * from './createProviderDtoApiType';
 export * from './createProviderDtoAuthType';
 export * from './credentialKind';
+export * from './delegatedAgentRefDto';
+export * from './delegatedAgentSubjectDto';
+export * from './delegatedAgentSubjectDtoKind';
+export * from './delegatedApertureConstraintsDto';
 export * from './durableWorkspaceRefDto';
 export * from './embeddingCommitmentActivationDto';
 export * from './embeddingCommitmentActivationDtoDataEnvelope';
@@ -246,6 +251,7 @@ export * from './promptMergeMode';
 export * from './providerDeletionAffectedStrategyDto';
 export * from './providerDeletionImpactResponseDto';
 export * from './providerDeletionImpactResponseDtoDataEnvelope';
+export * from './providerOwnerSpaceKind';
 export * from './providerProbeResponseDto';
 export * from './providerProbeResponseDtoDataEnvelope';
 export * from './providerResponseDto';
@@ -280,6 +286,8 @@ export * from './resolvedConfigSnapshotResponseDto';
 export * from './resolvedConfigSnapshotResponseDtoDataEnvelope';
 export * from './resolvedConfigSnapshotResponseDtoPayload';
 export * from './resolvedConfigSnapshotResponseDtoPayloadObjectKey';
+export * from './resolvedDelegatedApertureDto';
+export * from './resolvedDelegatedApertureDtoReachTier';
 export * from './resolvedEmbeddingCommitmentDto';
 export * from './resolvedEmbeddingCommitmentDtoDataEnvelope';
 export * from './resolvedEmbeddingCommitmentDtoState';
@@ -350,6 +358,7 @@ export * from './upsertAgentModelOverrideDto';
 export * from './upsertAgentModelOverrideDtoScope';
 export * from './upsertEmbeddingCommitmentDto';
 export * from './upsertModelStrategyEntriesDto';
+export * from './upsertModelStrategyEntryDto';
 export * from './upsertToolProfileDto';
 export * from './widgetKindDto';
 export * from './widgetKindDtoPayloadSchema';

package/dist/models/index.js

@@ -30,6 +30,7 @@ __exportStar(require("./agentCapabilityApertureDtoKind"), exports);
 __exportStar(require("./agentCapabilityLayerDto"), exports);
 __exportStar(require("./agentCapabilityLayerDtoMayEditRepos"), exports);
 __exportStar(require("./agentCapabilityLayerDtoWritePolicy"), exports);
+__exportStar(require("./agentCapabilitySetExpressionDto"), exports);
 __exportStar(require("./agentConfigBlockDto"), exports);
 __exportStar(require("./agentConfigBlockDtoColor"), exports);
 __exportStar(require("./agentConfigBlockDtoPermission"), exports);
@@ -151,6 +152,10 @@ __exportStar(require("./createProviderDto"), exports);
 __exportStar(require("./createProviderDtoApiType"), exports);
 __exportStar(require("./createProviderDtoAuthType"), exports);
 __exportStar(require("./credentialKind"), exports);
+__exportStar(require("./delegatedAgentRefDto"), exports);
+__exportStar(require("./delegatedAgentSubjectDto"), exports);
+__exportStar(require("./delegatedAgentSubjectDtoKind"), exports);
+__exportStar(require("./delegatedApertureConstraintsDto"), exports);
 __exportStar(require("./durableWorkspaceRefDto"), exports);
 __exportStar(require("./embeddingCommitmentActivationDto"), exports);
 __exportStar(require("./embeddingCommitmentActivationDtoDataEnvelope"), exports);
@@ -263,6 +268,7 @@ __exportStar(require("./promptMergeMode"), exports);
 __exportStar(require("./providerDeletionAffectedStrategyDto"), exports);
 __exportStar(require("./providerDeletionImpactResponseDto"), exports);
 __exportStar(require("./providerDeletionImpactResponseDtoDataEnvelope"), exports);
+__exportStar(require("./providerOwnerSpaceKind"), exports);
 __exportStar(require("./providerProbeResponseDto"), exports);
 __exportStar(require("./providerProbeResponseDtoDataEnvelope"), exports);
 __exportStar(require("./providerResponseDto"), exports);
@@ -297,6 +303,8 @@ __exportStar(require("./resolvedConfigSnapshotResponseDto"), exports);
 __exportStar(require("./resolvedConfigSnapshotResponseDtoDataEnvelope"), exports);
 __exportStar(require("./resolvedConfigSnapshotResponseDtoPayload"), exports);
 __exportStar(require("./resolvedConfigSnapshotResponseDtoPayloadObjectKey"), exports);
+__exportStar(require("./resolvedDelegatedApertureDto"), exports);
+__exportStar(require("./resolvedDelegatedApertureDtoReachTier"), exports);
 __exportStar(require("./resolvedEmbeddingCommitmentDto"), exports);
 __exportStar(require("./resolvedEmbeddingCommitmentDtoDataEnvelope"), exports);
 __exportStar(require("./resolvedEmbeddingCommitmentDtoState"), exports);
@@ -367,6 +375,7 @@ __exportStar(require("./upsertAgentModelOverrideDto"), exports);
 __exportStar(require("./upsertAgentModelOverrideDtoScope"), exports);
 __exportStar(require("./upsertEmbeddingCommitmentDto"), exports);
 __exportStar(require("./upsertModelStrategyEntriesDto"), exports);
+__exportStar(require("./upsertModelStrategyEntryDto"), exports);
 __exportStar(require("./upsertToolProfileDto"), exports);
 __exportStar(require("./widgetKindDto"), exports);
 __exportStar(require("./widgetKindDtoPayloadSchema"), exports);

package/dist/models/modelCapability.d.ts

@@ -4,7 +4,7 @@
  * OpenAPI spec version: 0.1.3
  */
 /**
- * A modality this invocation REQUIRES — the Matrix `modelCapability` dimension, so one rule can route every vision-needing invocation to a multimodal model without pinning a provider. Closed kernel set; an unknown value is a 400.
+ * A modality this invocation REQUIRES — the Matrix `modelCapability` dimension, so one rule can route every vision-needing invocation to a multimodal model without pinning a provider. It is ALSO a requirement on whatever the resolution selects: a resolved model that does not provide it is refused with 422 `MODEL_CAPABILITY_UNSUPPORTED` rather than returned, and no other model is substituted. Closed kernel set; an unknown value is a 400.
  */
 export type ModelCapability = typeof ModelCapability[keyof typeof ModelCapability];
 export declare const ModelCapability: {

package/dist/models/modelStrategyResponseDto.d.ts

@@ -17,6 +17,8 @@ export interface ModelStrategyResponseDto {
     isSystem: boolean;
     isDefault: boolean;
     createdBy: string;
+    /** The entry set's concurrency counter. Send it back as `expectedVersion` when replacing the whole entry set. Moves on every write that changes the entries — including a per-lane write — and not on an unrelated metadata edit. */
+    version: number;
     createdAt: string;
     updatedAt: string;
     /**

package/dist/models/modelVocabularyKeyDto.d.ts

@@ -12,4 +12,6 @@ export interface ModelVocabularyKeyDto {
     title: string;
     /** What work this key names, in the reader's words. */
     description: string;
+    /** The biome(s) that declare this key, among the declarations visible to the caller — sorted, de-duplicated, and EVERY declarer rather than one: two biomes may declare the same key, and both are reported. Empty for a key no biome declared. PROVENANCE, NOT IDENTITY: the key alone is the stable identifier, and this list moves when a biome is renamed or replaced — group or explain by it, never key a binding on it. */
+    declaringBiomeIds: string[];
 }

package/dist/models/providerOwnerSpaceKind.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+/**
+ * Owner tier: `system` (platform-owned) or `org`.
+ */
+export type ProviderOwnerSpaceKind = typeof ProviderOwnerSpaceKind[keyof typeof ProviderOwnerSpaceKind];
+export declare const ProviderOwnerSpaceKind: {
+    readonly system: "system";
+    readonly org: "org";
+};

package/dist/models/providerOwnerSpaceKind.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderOwnerSpaceKind = void 0;
+exports.ProviderOwnerSpaceKind = {
+    system: 'system',
+    org: 'org',
+};

package/dist/models/providerResponseDto.d.ts

@@ -4,11 +4,18 @@
  * OpenAPI spec version: 0.1.3
  */
 import type { ModelResponseDto } from './modelResponseDto.js';
+import type { ProviderOwnerSpaceKind } from './providerOwnerSpaceKind.js';
 import type { ProviderResponseDtoApiType } from './providerResponseDtoApiType.js';
 import type { ProviderResponseDtoAuthType } from './providerResponseDtoAuthType.js';
 export interface ProviderResponseDto {
     id: string;
-    orgId: string;
+    /**
+       * The owning organisation, or null for a PLATFORM-owned provider (ownerSpaceKind = system).
+       * @nullable
+       */
+    orgId: string | null;
+    /** Owner tier: `system` (platform-owned) or `org`. */
+    ownerSpaceKind: ProviderOwnerSpaceKind;
     name: string;
     slug: string;
     apiType: ProviderResponseDtoApiType;

package/dist/models/resolveModelForInvocationDto.d.ts

@@ -49,6 +49,6 @@ export interface ResolveModelForInvocationDto {
        * @maxLength 512
        */
     skillSlug?: string;
-    /** A modality this invocation REQUIRES — the Matrix `modelCapability` dimension, so one rule can route every vision-needing invocation to a multimodal model without pinning a provider. Closed kernel set; an unknown value is a 400. */
+    /** A modality this invocation REQUIRES — the Matrix `modelCapability` dimension, so one rule can route every vision-needing invocation to a multimodal model without pinning a provider. It is ALSO a requirement on whatever the resolution selects: a resolved model that does not provide it is refused with 422 `MODEL_CAPABILITY_UNSUPPORTED` rather than returned, and no other model is substituted. Closed kernel set; an unknown value is a 400. */
     modelCapability?: ModelCapability;
 }

package/dist/models/resolvedDelegatedApertureDto.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+import type { DelegatedAgentRefDto } from './delegatedAgentRefDto.js';
+import type { DelegatedAgentSubjectDto } from './delegatedAgentSubjectDto.js';
+import type { DelegatedApertureConstraintsDto } from './delegatedApertureConstraintsDto.js';
+import type { ResolvedDelegatedApertureDtoReachTier } from './resolvedDelegatedApertureDtoReachTier.js';
+export interface ResolvedDelegatedApertureDto {
+    agentKey: string;
+    agentRef: DelegatedAgentRefDto;
+    /** @nullable */
+    parentAgentKey: string | null;
+    depth: number;
+    authoredPath: DelegatedAgentSubjectDto[];
+    constraints: DelegatedApertureConstraintsDto;
+    reachTier: ResolvedDelegatedApertureDtoReachTier;
+    /** Every entry this authority may delegate to (all routes, not only the canonical parent), sorted. */
+    delegateAgentKeys: string[];
+}

package/dist/models/resolvedDelegatedApertureDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resolvedDelegatedApertureDtoReachTier.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+export type ResolvedDelegatedApertureDtoReachTier = typeof ResolvedDelegatedApertureDtoReachTier[keyof typeof ResolvedDelegatedApertureDtoReachTier];
+export declare const ResolvedDelegatedApertureDtoReachTier: {
+    readonly sandbox: "sandbox";
+    readonly 'as-owner': "as-owner";
+    readonly connected: "connected";
+    readonly full: "full";
+};

package/dist/models/resolvedDelegatedApertureDtoReachTier.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResolvedDelegatedApertureDtoReachTier = void 0;
+exports.ResolvedDelegatedApertureDtoReachTier = {
+    sandbox: 'sandbox',
+    'as-owner': 'as-owner',
+    connected: 'connected',
+    full: 'full',
+};

package/dist/models/upsertModelStrategyEntriesDto.d.ts

@@ -7,4 +7,9 @@ import type { CreateModelStrategyEntryDto } from './createModelStrategyEntryDto.
 export interface UpsertModelStrategyEntriesDto {
     /** Role entries (replaces all entries) */
     entries: CreateModelStrategyEntryDto[];
+    /**
+       * The `version` read from this strategy. When sent, a stale value is refused with 409 `MODEL_STRATEGY_VERSION_MISMATCH`, which carries `currentVersion` to retry with. Send it: it is optional only for one transition and will become REQUIRED — without it this route replaces the whole entry set unconditionally, so a concurrent edit to a DIFFERENT lane is silently discarded. To change one lane, use PUT /model-strategies/:id/entries/:lane, which needs no version.
+       * @minimum 1
+       */
+    expectedVersion?: number;
 }

package/dist/models/upsertModelStrategyEntryDto.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+export interface UpsertModelStrategyEntryDto {
+    /** Model slug/ID to match against LlmModel.modelId */
+    modelSlug: string;
+    /**
+       * Temperature (0-2). Omitted = the engine/model owns it; no platform value is ever materialized.
+       * @minimum 0
+       * @maximum 2
+       */
+    temperature?: number;
+    /** Reasoning effort asked of the model — the kernel's `ModelOptions.reasoningEffort`, an open string the provider interprets (`low`/`medium`/`high`/…). Omitted = the engine/model owns it. */
+    reasoningEffort?: string;
+}

package/dist/models/upsertModelStrategyEntryDto.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * LLM Registry API
+ * OpenAPI spec version: 0.1.3
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/llm-registry-api-client",
-  "version": "0.8.13",
+  "version": "0.10.1",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -19,7 +19,7 @@
     "service": "llm-registry-api",
     "biome": "agent-runtime",
     "target": "server",
-    "generator": "@xemahq/api-client-generator@1.1.2",
+    "generator": "@xemahq/api-client-generator@2.1.1",
     "source": "openapi.public.json"
   },
   "license": "LicenseRef-Xema-BSL-1.1",