@xemahq/space-registry-api-client 0.1.1 → 0.2.0

package/LICENSE

@@ -9,7 +9,7 @@ Parameters
 
 Licensor:  Neuralchowder Inc.
 
-Licensed Work:  Xema. The Licensed Work is (c) 2026 Neuralchowder Inc..
+Licensed Work:  Xema. The Licensed Work is (c) 2026 Neuralchowder Inc.
 
   The Licensed Work includes, without limitation, Xema Core, Xema Runtime,
   Xema Kernel, Xema control plane, Xema application runtime, Xema biome
@@ -116,6 +116,7 @@ the interpretation of, the Additional Use Grant set out above.
       and effect. The Licensor reserves all rights not expressly granted
       by this License.
 
+
 Change Date:  Four years from the date the specific version of the Licensed
   Work is first publicly released by Licensor.
 

package/dist/endpoints/spaces/spaces.d.ts

@@ -5,37 +5,41 @@
  * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
  * OpenAPI spec version: 0.1.0
  */
-import type { CreateSpaceDto, SpaceAncestorsDto, SpaceClassificationDto, SpaceDto, SpacesControllerAncestorsParams, SpacesControllerClassificationParams, SpacesControllerListParams, SpacesControllerResolveParams, UpdateClassificationDto } from '../../models';
+import type { CreateSpaceDto, SpaceAncestorsDtoDataEnvelope, SpaceClassificationDtoDataEnvelope, SpaceDtoDataArrayEnvelope, SpaceDtoDataEnvelope, SpacesControllerAncestorsParams, SpacesControllerClassificationParams, SpacesControllerListParams, SpacesControllerResolveParams, UpdateClassificationDto } from '../../models';
 export declare const getSpacesControllerCreateUrl: () => string;
 /**
  * @summary Create a Space (idempotent on its canonical refUri).
  */
-export declare const spacesControllerCreate: (createSpaceDto: CreateSpaceDto, options?: RequestInit) => Promise<SpaceDto>;
+export declare const spacesControllerCreate: (createSpaceDto: CreateSpaceDto, options?: RequestInit) => Promise<SpaceDtoDataEnvelope>;
 export declare const getSpacesControllerListUrl: (params?: SpacesControllerListParams) => string;
 /**
  * @summary List the caller org's Spaces (newest first). Org-less System Spaces are not enumerated here.
  */
-export declare const spacesControllerList: (params?: SpacesControllerListParams, options?: RequestInit) => Promise<SpaceDto[]>;
+export declare const spacesControllerList: (params?: SpacesControllerListParams, options?: RequestInit) => Promise<SpaceDtoDataArrayEnvelope>;
 export declare const getSpacesControllerResolveUrl: (params: SpacesControllerResolveParams) => string;
 /**
+ * The organization is selected through the X-Xema-Org-Id request context, NOT through the ref. A ref naming a different organization is refused with 403 SPACE_CROSS_ORG_ACCESS_FORBIDDEN — never silently preferred. Org-less refs (xema://system, xema://biomes/<id>, xema://users/<id>, xema://sessions/<id>) are platform-global and remain readable by every authenticated caller.
  * @summary Resolve a Space by its xema:// URI.
  */
-export declare const spacesControllerResolve: (params: SpacesControllerResolveParams, options?: RequestInit) => Promise<SpaceDto>;
+export declare const spacesControllerResolve: (params: SpacesControllerResolveParams, options?: RequestInit) => Promise<SpaceDtoDataEnvelope>;
 export declare const getSpacesControllerAncestorsUrl: (params: SpacesControllerAncestorsParams) => string;
 /**
+ * Same tenant rule as /spaces/resolve: the ref is fenced against the request-context organization. The org-less System tail of the chain is returned for every caller — it is what carries the inherited classification floor.
  * @summary Persisted ancestor chain (closest-first, self at index 0) up to System.
  */
-export declare const spacesControllerAncestors: (params: SpacesControllerAncestorsParams, options?: RequestInit) => Promise<SpaceAncestorsDto>;
+export declare const spacesControllerAncestors: (params: SpacesControllerAncestorsParams, options?: RequestInit) => Promise<SpaceAncestorsDtoDataEnvelope>;
 export declare const getSpacesControllerClassificationUrl: (params: SpacesControllerClassificationParams) => string;
 /**
+ * Same tenant rule as /spaces/resolve. A data-classification label is exactly the kind of metadata a cross-tenant read must not expose, so a ref naming another organization is refused with 403.
  * @summary Resolve effective (most-specific-wins) classification over the ancestry.
  */
-export declare const spacesControllerClassification: (params: SpacesControllerClassificationParams, options?: RequestInit) => Promise<SpaceClassificationDto>;
+export declare const spacesControllerClassification: (params: SpacesControllerClassificationParams, options?: RequestInit) => Promise<SpaceClassificationDtoDataEnvelope>;
 export declare const getSpacesControllerGetByIdUrl: (id: string) => string;
 /**
+ * A Space owned by another organization returns the SAME 404 as an unknown id — an opaque id names no tenant, so a distinct 403 would make this route a cross-tenant existence oracle.
  * @summary Fetch a Space by opaque id.
  */
-export declare const spacesControllerGetById: (id: string, options?: RequestInit) => Promise<SpaceDto>;
+export declare const spacesControllerGetById: (id: string, options?: RequestInit) => Promise<SpaceDtoDataEnvelope>;
 export declare const getSpacesControllerRemoveUrl: (id: string) => string;
 /**
  * @summary Delete a Space by id. Refuses system-managed Spaces and Spaces that still have children (fail-fast).
@@ -45,4 +49,4 @@ export declare const getSpacesControllerSetClassificationUrl: (id: string) => st
 /**
  * @summary Set/change a Space's own classification. Downgrades require allowDowngrade and are audited.
  */
-export declare const spacesControllerSetClassification: (id: string, updateClassificationDto: UpdateClassificationDto, options?: RequestInit) => Promise<SpaceDto>;
+export declare const spacesControllerSetClassification: (id: string, updateClassificationDto: UpdateClassificationDto, options?: RequestInit) => Promise<SpaceDtoDataEnvelope>;

package/dist/endpoints/spaces/spaces.js

@@ -75,6 +75,7 @@ const getSpacesControllerResolveUrl = (params) => {
 };
 exports.getSpacesControllerResolveUrl = getSpacesControllerResolveUrl;
 /**
+ * The organization is selected through the X-Xema-Org-Id request context, NOT through the ref. A ref naming a different organization is refused with 403 SPACE_CROSS_ORG_ACCESS_FORBIDDEN — never silently preferred. Org-less refs (xema://system, xema://biomes/<id>, xema://users/<id>, xema://sessions/<id>) are platform-global and remain readable by every authenticated caller.
  * @summary Resolve a Space by its xema:// URI.
  */
 const spacesControllerResolve = async (params, options) => {
@@ -108,6 +109,7 @@ const getSpacesControllerAncestorsUrl = (params) => {
 };
 exports.getSpacesControllerAncestorsUrl = getSpacesControllerAncestorsUrl;
 /**
+ * Same tenant rule as /spaces/resolve: the ref is fenced against the request-context organization. The org-less System tail of the chain is returned for every caller — it is what carries the inherited classification floor.
  * @summary Persisted ancestor chain (closest-first, self at index 0) up to System.
  */
 const spacesControllerAncestors = async (params, options) => {
@@ -141,6 +143,7 @@ const getSpacesControllerClassificationUrl = (params) => {
 };
 exports.getSpacesControllerClassificationUrl = getSpacesControllerClassificationUrl;
 /**
+ * Same tenant rule as /spaces/resolve. A data-classification label is exactly the kind of metadata a cross-tenant read must not expose, so a ref naming another organization is refused with 403.
  * @summary Resolve effective (most-specific-wins) classification over the ancestry.
  */
 const spacesControllerClassification = async (params, options) => {
@@ -155,6 +158,7 @@ const getSpacesControllerGetByIdUrl = (id) => {
 };
 exports.getSpacesControllerGetByIdUrl = getSpacesControllerGetByIdUrl;
 /**
+ * A Space owned by another organization returns the SAME 404 as an unknown id — an opaque id names no tenant, so a distinct 403 would make this route a cross-tenant existence oracle.
  * @summary Fetch a Space by opaque id.
  */
 const spacesControllerGetById = async (id, options) => {

package/dist/models/dataClassification.d.ts

@@ -6,7 +6,7 @@
  * OpenAPI spec version: 0.1.0
  */
 /**
- * Own data classification. MUST be >= the parent floor unless allowClassificationBelowParent is set.
+ * Own classification, if explicitly set on this Space.
  */
 export type DataClassification = typeof DataClassification[keyof typeof DataClassification];
 export declare const DataClassification: {

package/dist/models/index.d.ts

@@ -2,11 +2,15 @@ export * from './createSpaceDto';
 export * from './createSpaceDtoLabels';
 export * from './dataClassification';
 export * from './spaceAncestorsDto';
+export * from './spaceAncestorsDtoDataEnvelope';
 export * from './spaceClassificationDto';
+export * from './spaceClassificationDtoDataEnvelope';
 export * from './spaceClassificationDtoResolvedFromRefUri';
 export * from './spaceDto';
 export * from './spaceDtoAppId';
 export * from './spaceDtoBiomeId';
+export * from './spaceDtoDataArrayEnvelope';
+export * from './spaceDtoDataEnvelope';
 export * from './spaceDtoLabels';
 export * from './spaceDtoOrgId';
 export * from './spaceDtoParentId';

package/dist/models/index.js

@@ -19,11 +19,15 @@ __exportStar(require("./createSpaceDto"), exports);
 __exportStar(require("./createSpaceDtoLabels"), exports);
 __exportStar(require("./dataClassification"), exports);
 __exportStar(require("./spaceAncestorsDto"), exports);
+__exportStar(require("./spaceAncestorsDtoDataEnvelope"), exports);
 __exportStar(require("./spaceClassificationDto"), exports);
+__exportStar(require("./spaceClassificationDtoDataEnvelope"), exports);
 __exportStar(require("./spaceClassificationDtoResolvedFromRefUri"), exports);
 __exportStar(require("./spaceDto"), exports);
 __exportStar(require("./spaceDtoAppId"), exports);
 __exportStar(require("./spaceDtoBiomeId"), exports);
+__exportStar(require("./spaceDtoDataArrayEnvelope"), exports);
+__exportStar(require("./spaceDtoDataEnvelope"), exports);
 __exportStar(require("./spaceDtoLabels"), exports);
 __exportStar(require("./spaceDtoOrgId"), exports);
 __exportStar(require("./spaceDtoParentId"), exports);

package/dist/models/spaceAncestorsDtoDataEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Space Registry API
+ * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceAncestorsDto } from './spaceAncestorsDto.js';
+export interface SpaceAncestorsDtoDataEnvelope {
+    data: SpaceAncestorsDto;
+}

package/dist/models/spaceAncestorsDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceClassificationDtoDataEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Space Registry API
+ * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceClassificationDto } from './spaceClassificationDto.js';
+export interface SpaceClassificationDtoDataEnvelope {
+    data: SpaceClassificationDto;
+}

package/dist/models/spaceClassificationDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceDtoDataArrayEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Space Registry API
+ * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceDto } from './spaceDto.js';
+export interface SpaceDtoDataArrayEnvelope {
+    data: SpaceDto[];
+}

package/dist/models/spaceDtoDataArrayEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceDtoDataEnvelope.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by orval v8.16.0 🍺
+ * Do not edit manually.
+ * Space Registry API
+ * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceDto } from './spaceDto.js';
+export interface SpaceDtoDataEnvelope {
+    data: SpaceDto;
+}

package/dist/models/spaceDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@xemahq/space-registry-api-client",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
     "dist"
   ],
   "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "public"
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
   },
   "devDependencies": {
     "typescript": "5.9.3"
@@ -19,7 +19,7 @@
     "service": "space-registry-api",
     "biome": "space-registry",
     "target": "server",
-    "generator": "@xemahq/api-client-generator@0.1.2",
+    "generator": "@xemahq/api-client-generator@0.2.0",
     "source": "openapi.public.json"
   },
   "license": "LicenseRef-Xema-BSL-1.1",
@@ -28,7 +28,7 @@
   "bugs": "https://github.com/xema-dev/xema-community/issues",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/xema-dev/xema-community.git",
+    "url": "git+https://github.com/xema-dev/xema-base.git",
     "directory": "packages/clients/space-registry-api"
   },
   "description": "Generated public API client for the Xema space-registry-api service.",