@xemahq/space-registry-api-client 0.2.10 → 0.2.17

package/dist/endpoints/resource-roles/resource-roles.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ResourceRoleCatalogueResponseDtoDataEnvelope, ResourceRolesCatalogueControllerListParams } from '../../models';
+export declare const getResourceRolesCatalogueControllerListUrl: (params?: ResourceRolesCatalogueControllerListParams) => string;
+/**
+ * The roles a biome (or a system seed) has declared, each with what it is for and the space tiers a consumer resolves it at. Declaring a role and ANSWERING one are different questions: which resource plays a role is the organisation’s, per owner, and is served by `/resource-role-bindings`. An empty list is an answer — nothing has declared a role — never a defaulted catalogue.
+ * @summary Every role DECLARED in this deployment
+ */
+export declare const resourceRolesCatalogueControllerList: (params?: ResourceRolesCatalogueControllerListParams, options?: RequestInit) => Promise<ResourceRoleCatalogueResponseDtoDataEnvelope>;

package/dist/endpoints/resource-roles/resource-roles.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resourceRolesCatalogueControllerList = exports.getResourceRolesCatalogueControllerListUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getResourceRolesCatalogueControllerListUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/resource-roles?${stringifiedParams}` : `/resource-roles`;
+};
+exports.getResourceRolesCatalogueControllerListUrl = getResourceRolesCatalogueControllerListUrl;
+/**
+ * The roles a biome (or a system seed) has declared, each with what it is for and the space tiers a consumer resolves it at. Declaring a role and ANSWERING one are different questions: which resource plays a role is the organisation’s, per owner, and is served by `/resource-role-bindings`. An empty list is an answer — nothing has declared a role — never a defaulted catalogue.
+ * @summary Every role DECLARED in this deployment
+ */
+const resourceRolesCatalogueControllerList = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getResourceRolesCatalogueControllerListUrl)(params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.resourceRolesCatalogueControllerList = resourceRolesCatalogueControllerList;

package/dist/endpoints/spaces/spaces.d.ts

@@ -65,8 +65,8 @@ export declare const getSpacesControllerAncestorsUrl: (params: SpacesControllerA
 export declare const spacesControllerAncestors: (params: SpacesControllerAncestorsParams, options?: RequestInit) => Promise<SpaceAncestorsDtoDataEnvelope>;
 export declare const getSpacesControllerClassificationUrl: (params: SpacesControllerClassificationParams) => string;
 /**
- * Same tenant rule as /spaces/resolve. A data-classification label is exactly the kind of metadata a cross-tenant read must not expose, so a ref naming another organization is refused with 403.
- * @summary Resolve effective (most-specific-wins) classification over the ancestry.
+ * The monotone JOIN over every declaration on the ref and its ancestors — NOT most-specific-wins, which is the whole safety property: a project declaring `public` cannot escape an org that declared `secret`. The response carries the ANSWER as well as the value — `configured`, `source`, the full `inheritancePath` (silent rungs included) and `clampedByRefUri`, the ancestor that overrode a nearer declaration. Same tenant rule as /spaces/resolve. A data-classification label is exactly the kind of metadata a cross-tenant read must not expose, so a ref naming another organization is refused with 403.
+ * @summary Resolve the effective classification over the ancestry, with its source.
  */
 export declare const spacesControllerClassification: (params: SpacesControllerClassificationParams, options?: RequestInit) => Promise<SpaceClassificationDtoDataEnvelope>;
 export declare const getSpacesControllerGetByIdUrl: (id: string) => string;

package/dist/endpoints/spaces/spaces.js

@@ -240,8 +240,8 @@ const getSpacesControllerClassificationUrl = (params) => {
 };
 exports.getSpacesControllerClassificationUrl = getSpacesControllerClassificationUrl;
 /**
- * Same tenant rule as /spaces/resolve. A data-classification label is exactly the kind of metadata a cross-tenant read must not expose, so a ref naming another organization is refused with 403.
- * @summary Resolve effective (most-specific-wins) classification over the ancestry.
+ * The monotone JOIN over every declaration on the ref and its ancestors — NOT most-specific-wins, which is the whole safety property: a project declaring `public` cannot escape an org that declared `secret`. The response carries the ANSWER as well as the value — `configured`, `source`, the full `inheritancePath` (silent rungs included) and `clampedByRefUri`, the ancestor that overrode a nearer declaration. Same tenant rule as /spaces/resolve. A data-classification label is exactly the kind of metadata a cross-tenant read must not expose, so a ref naming another organization is refused with 403.
+ * @summary Resolve the effective classification over the ancestry, with its source.
  */
 const spacesControllerClassification = async (params, options) => {
     return (0, custom_fetch_1.customFetch)((0, exports.getSpacesControllerClassificationUrl)(params), {

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { configureClient, getClientConfig, ClientError, customFetch, type ClientConfig, type RetryNotice } from './custom-fetch';
 export * from './models';
 export * from './endpoints/resource-role-bindings/resource-role-bindings';
+export * from './endpoints/resource-roles/resource-roles';
 export * from './endpoints/spaces/spaces';

package/dist/index.js

@@ -23,4 +23,5 @@ Object.defineProperty(exports, "ClientError", { enumerable: true, get: function
 Object.defineProperty(exports, "customFetch", { enumerable: true, get: function () { return custom_fetch_1.customFetch; } });
 __exportStar(require("./models"), exports);
 __exportStar(require("./endpoints/resource-role-bindings/resource-role-bindings"), exports);
+__exportStar(require("./endpoints/resource-roles/resource-roles"), exports);
 __exportStar(require("./endpoints/spaces/spaces"), exports);

package/dist/models/createSpaceDto.d.ts

@@ -6,7 +6,10 @@
 import type { CreateSpaceDtoLabels } from './createSpaceDtoLabels.js';
 import type { DataClassification } from './dataClassification.js';
 export interface CreateSpaceDto {
-    /** Canonical xema:// Space URI to create. */
+    /**
+       * Canonical xema:// Space URI to create.
+       * @pattern /^xema:\/\//
+       */
     ref: string;
     /** Human-readable label for this Space. */
     displayName: string;

package/dist/models/growthGateDto.d.ts

@@ -9,6 +9,9 @@ export interface GrowthGateDto {
     enabled?: boolean;
     /** Minimum organization role. Absent means every member satisfies it. */
     minimumOrgRole?: GrowthGateDtoMinimumOrgRole;
-    /** Restrict to members of these identity groups. Absent or empty means no group restriction was stated — it never means "nobody". */
+    /**
+       * Restrict to members of these identity groups. Absent or empty means no group restriction was stated — it never means "nobody".
+       * @items.maxLength 256
+       */
     restrictedToGroupIds?: string[];
 }

package/dist/models/index.d.ts

@@ -1,21 +1,23 @@
 export * from './createSpaceDto';
 export * from './createSpaceDtoLabels';
 export * from './dataClassification';
-export * from './errorDetailsDto';
-export * from './errorDetailsDtoDetails';
-export * from './errorPayloadDto';
-export * from './errorResponseDto';
 export * from './growthGateDto';
 export * from './growthGateDtoMinimumOrgRole';
 export * from './memberShellModeOverrideDto';
 export * from './memberShellModeOverrideDtoMode';
 export * from './orgExperienceSettingsDto';
 export * from './orgExperienceSettingsDtoDataEnvelope';
+export * from './orgExperienceSettingsDtoEffectiveShellMode';
 export * from './orgExperienceSettingsDtoMemberShellMode';
+export * from './orgExperienceSettingsDtoUnstatedMemberShellMode';
 export * from './orgGovernanceSettingsDto';
 export * from './orgGovernanceSettingsDtoDataEnvelope';
 export * from './orgGrowthSettingsDto';
 export * from './orgGrowthSettingsDtoDataEnvelope';
+export * from './parameterSourceKind';
+export * from './parameterStepOutcome';
+export * from './problemDetailsDto';
+export * from './problemFieldIssueDto';
 export * from './resolvedResourceRoleBindingResponseDto';
 export * from './resolvedResourceRoleBindingResponseDtoDataEnvelope';
 export * from './resourceRoleBindingListResponseDto';
@@ -23,6 +25,11 @@ export * from './resourceRoleBindingListResponseDtoDataEnvelope';
 export * from './resourceRoleBindingResponseDto';
 export * from './resourceRoleBindingResponseDtoDataEnvelope';
 export * from './resourceRoleBindingResponseDtoTarget';
+export * from './resourceRoleCatalogueResponseDto';
+export * from './resourceRoleCatalogueResponseDtoDataEnvelope';
+export * from './resourceRoleDeclarationResponseDto';
+export * from './resourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem';
+export * from './resourceRolesCatalogueControllerListParams';
 export * from './resourceRolesControllerListParams';
 export * from './resourceRolesControllerResolveParams';
 export * from './resourceRolesControllerUnsetParams';
@@ -32,6 +39,7 @@ export * from './spaceAncestorsDto';
 export * from './spaceAncestorsDtoDataEnvelope';
 export * from './spaceClassificationDto';
 export * from './spaceClassificationDtoDataEnvelope';
+export * from './spaceClassificationStepDto';
 export * from './spaceDto';
 export * from './spaceDtoDataArrayEnvelope';
 export * from './spaceDtoDataEnvelope';

package/dist/models/index.js

@@ -18,21 +18,23 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./createSpaceDto"), exports);
 __exportStar(require("./createSpaceDtoLabels"), exports);
 __exportStar(require("./dataClassification"), exports);
-__exportStar(require("./errorDetailsDto"), exports);
-__exportStar(require("./errorDetailsDtoDetails"), exports);
-__exportStar(require("./errorPayloadDto"), exports);
-__exportStar(require("./errorResponseDto"), exports);
 __exportStar(require("./growthGateDto"), exports);
 __exportStar(require("./growthGateDtoMinimumOrgRole"), exports);
 __exportStar(require("./memberShellModeOverrideDto"), exports);
 __exportStar(require("./memberShellModeOverrideDtoMode"), exports);
 __exportStar(require("./orgExperienceSettingsDto"), exports);
 __exportStar(require("./orgExperienceSettingsDtoDataEnvelope"), exports);
+__exportStar(require("./orgExperienceSettingsDtoEffectiveShellMode"), exports);
 __exportStar(require("./orgExperienceSettingsDtoMemberShellMode"), exports);
+__exportStar(require("./orgExperienceSettingsDtoUnstatedMemberShellMode"), exports);
 __exportStar(require("./orgGovernanceSettingsDto"), exports);
 __exportStar(require("./orgGovernanceSettingsDtoDataEnvelope"), exports);
 __exportStar(require("./orgGrowthSettingsDto"), exports);
 __exportStar(require("./orgGrowthSettingsDtoDataEnvelope"), exports);
+__exportStar(require("./parameterSourceKind"), exports);
+__exportStar(require("./parameterStepOutcome"), exports);
+__exportStar(require("./problemDetailsDto"), exports);
+__exportStar(require("./problemFieldIssueDto"), exports);
 __exportStar(require("./resolvedResourceRoleBindingResponseDto"), exports);
 __exportStar(require("./resolvedResourceRoleBindingResponseDtoDataEnvelope"), exports);
 __exportStar(require("./resourceRoleBindingListResponseDto"), exports);
@@ -40,6 +42,11 @@ __exportStar(require("./resourceRoleBindingListResponseDtoDataEnvelope"), export
 __exportStar(require("./resourceRoleBindingResponseDto"), exports);
 __exportStar(require("./resourceRoleBindingResponseDtoDataEnvelope"), exports);
 __exportStar(require("./resourceRoleBindingResponseDtoTarget"), exports);
+__exportStar(require("./resourceRoleCatalogueResponseDto"), exports);
+__exportStar(require("./resourceRoleCatalogueResponseDtoDataEnvelope"), exports);
+__exportStar(require("./resourceRoleDeclarationResponseDto"), exports);
+__exportStar(require("./resourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem"), exports);
+__exportStar(require("./resourceRolesCatalogueControllerListParams"), exports);
 __exportStar(require("./resourceRolesControllerListParams"), exports);
 __exportStar(require("./resourceRolesControllerResolveParams"), exports);
 __exportStar(require("./resourceRolesControllerUnsetParams"), exports);
@@ -49,6 +56,7 @@ __exportStar(require("./spaceAncestorsDto"), exports);
 __exportStar(require("./spaceAncestorsDtoDataEnvelope"), exports);
 __exportStar(require("./spaceClassificationDto"), exports);
 __exportStar(require("./spaceClassificationDtoDataEnvelope"), exports);
+__exportStar(require("./spaceClassificationStepDto"), exports);
 __exportStar(require("./spaceDto"), exports);
 __exportStar(require("./spaceDtoDataArrayEnvelope"), exports);
 __exportStar(require("./spaceDtoDataEnvelope"), exports);

package/dist/models/memberShellModeOverrideDto.d.ts

@@ -5,6 +5,7 @@
  */
 import type { MemberShellModeOverrideDtoMode } from './memberShellModeOverrideDtoMode.js';
 export interface MemberShellModeOverrideDto {
+    /** @maxLength 256 */
     groupId: string;
     mode: MemberShellModeOverrideDtoMode;
 }

package/dist/models/orgExperienceSettingsDto.d.ts

@@ -4,14 +4,20 @@
  * OpenAPI spec version: 0.1.0
  */
 import type { MemberShellModeOverrideDto } from './memberShellModeOverrideDto.js';
+import type { OrgExperienceSettingsDtoEffectiveShellMode } from './orgExperienceSettingsDtoEffectiveShellMode.js';
 import type { OrgExperienceSettingsDtoMemberShellMode } from './orgExperienceSettingsDtoMemberShellMode.js';
+import type { OrgExperienceSettingsDtoUnstatedMemberShellMode } from './orgExperienceSettingsDtoUnstatedMemberShellMode.js';
 export interface OrgExperienceSettingsDto {
     /** False when this organization has never written an experience policy. */
     configured: boolean;
-    /** How the shell presents itself to an ordinary member. Absent = the full shell (today's behaviour). Administrators are never confined. */
+    /** How the shell presents itself to an ordinary member. Absent leaves today's behaviour in place, which is portal-focused for an ordinary member — see `effectiveShellMode`, which is the field a shell should read. Administrators are never confined. */
     memberShellMode?: OrgExperienceSettingsDtoMemberShellMode;
     /** Per-group overrides, evaluated in declaration order so a member of two overridden groups gets a deterministic answer. */
     shellModeOverrides?: MemberShellModeOverrideDto[];
+    /** THE FIELD A SHELL READS: which mode THIS caller is in, with the org-wide setting, the per-group overrides and the caller's role already applied. Always present — there is always an answer, and an unconfigured org resolves to the behaviour it already has. The fields above are the POLICY an administrator edits; a shell that reads them instead would re-implement this resolution and drift from it. Still presentation only: it grants and withholds nothing. */
+    effectiveShellMode: OrgExperienceSettingsDtoEffectiveShellMode;
+    /** What an ordinary member gets when this organization has stated nothing — the platform default, not a value anyone configured. Published because an administrator looking at an unconfigured policy still needs to know what their members see, and the alternative is every consumer hard-coding a copy of this constant and drifting from it silently. It does NOT depend on the caller: `effectiveShellMode` is what YOU get, this is what an unconfigured member gets. */
+    unstatedMemberShellMode: OrgExperienceSettingsDtoUnstatedMemberShellMode;
     /** @nullable */
     updatedByActorId: string | null;
     /** @nullable */

package/dist/models/orgExperienceSettingsDtoEffectiveShellMode.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * THE FIELD A SHELL READS: which mode THIS caller is in, with the org-wide setting, the per-group overrides and the caller's role already applied. Always present — there is always an answer, and an unconfigured org resolves to the behaviour it already has. The fields above are the POLICY an administrator edits; a shell that reads them instead would re-implement this resolution and drift from it. Still presentation only: it grants and withholds nothing.
+ */
+export type OrgExperienceSettingsDtoEffectiveShellMode = typeof OrgExperienceSettingsDtoEffectiveShellMode[keyof typeof OrgExperienceSettingsDtoEffectiveShellMode];
+export declare const OrgExperienceSettingsDtoEffectiveShellMode: {
+    readonly full: "full";
+    readonly 'portal-focused': "portal-focused";
+};

package/dist/models/orgExperienceSettingsDtoEffectiveShellMode.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrgExperienceSettingsDtoEffectiveShellMode = void 0;
+exports.OrgExperienceSettingsDtoEffectiveShellMode = {
+    full: 'full',
+    'portal-focused': 'portal-focused',
+};

package/dist/models/orgExperienceSettingsDtoMemberShellMode.d.ts

@@ -4,7 +4,7 @@
  * OpenAPI spec version: 0.1.0
  */
 /**
- * How the shell presents itself to an ordinary member. Absent = the full shell (today's behaviour). Administrators are never confined.
+ * How the shell presents itself to an ordinary member. Absent leaves today's behaviour in place, which is portal-focused for an ordinary member — see `effectiveShellMode`, which is the field a shell should read. Administrators are never confined.
  */
 export type OrgExperienceSettingsDtoMemberShellMode = typeof OrgExperienceSettingsDtoMemberShellMode[keyof typeof OrgExperienceSettingsDtoMemberShellMode];
 export declare const OrgExperienceSettingsDtoMemberShellMode: {

package/dist/models/orgExperienceSettingsDtoUnstatedMemberShellMode.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What an ordinary member gets when this organization has stated nothing — the platform default, not a value anyone configured. Published because an administrator looking at an unconfigured policy still needs to know what their members see, and the alternative is every consumer hard-coding a copy of this constant and drifting from it silently. It does NOT depend on the caller: `effectiveShellMode` is what YOU get, this is what an unconfigured member gets.
+ */
+export type OrgExperienceSettingsDtoUnstatedMemberShellMode = typeof OrgExperienceSettingsDtoUnstatedMemberShellMode[keyof typeof OrgExperienceSettingsDtoUnstatedMemberShellMode];
+export declare const OrgExperienceSettingsDtoUnstatedMemberShellMode: {
+    readonly full: "full";
+    readonly 'portal-focused': "portal-focused";
+};

package/dist/models/orgExperienceSettingsDtoUnstatedMemberShellMode.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrgExperienceSettingsDtoUnstatedMemberShellMode = void 0;
+exports.OrgExperienceSettingsDtoUnstatedMemberShellMode = {
+    full: 'full',
+    'portal-focused': 'portal-focused',
+};

package/dist/models/orgGovernanceSettingsDto.d.ts

@@ -3,9 +3,12 @@
  * Space Registry API
  * OpenAPI spec version: 0.1.0
  */
+import type { ParameterSourceKind } from './parameterSourceKind.js';
 export interface OrgGovernanceSettingsDto {
     /** False when this organization has never written a governance setting — the resting state, not an error. */
     configured: boolean;
+    /** Where an effective value came from: `platform-default` (nobody stated it anywhere), `stated` (the scope being read stated it) or `inherited` (a less specific scope in the same chain stated it). */
+    source: ParameterSourceKind;
     /** When true, LOWERING a Space classification opens a Decision addressed to the data-governance group instead of performing the write. Raising a classification is never affected. */
     downgradeSeparationOfDuties: boolean;
     /**

package/dist/models/orgGovernanceSettingsDto.js

@@ -1,7 +1,2 @@
 "use strict";
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Space Registry API
- * OpenAPI spec version: 0.1.0
- */
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/parameterSourceKind.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Where an effective value came from: `platform-default` (nobody stated it anywhere), `stated` (the scope being read stated it) or `inherited` (a less specific scope in the same chain stated it).
+ */
+export type ParameterSourceKind = typeof ParameterSourceKind[keyof typeof ParameterSourceKind];
+export declare const ParameterSourceKind: {
+    readonly 'platform-default': "platform-default";
+    readonly stated: "stated";
+    readonly inherited: "inherited";
+};

package/dist/models/parameterSourceKind.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParameterSourceKind = void 0;
+exports.ParameterSourceKind = {
+    'platform-default': 'platform-default',
+    stated: 'stated',
+    inherited: 'inherited',
+};

package/dist/models/parameterStepOutcome.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What this rung did: `silent` (declared nothing), `decided` (its value IS the effective one — exactly one rung ever is), `shadowed` (it declared something and something else decided).
+ */
+export type ParameterStepOutcome = typeof ParameterStepOutcome[keyof typeof ParameterStepOutcome];
+export declare const ParameterStepOutcome: {
+    readonly silent: "silent";
+    readonly decided: "decided";
+    readonly shadowed: "shadowed";
+};

package/dist/models/parameterStepOutcome.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParameterStepOutcome = void 0;
+exports.ParameterStepOutcome = {
+    silent: 'silent',
+    decided: 'decided',
+    shadowed: 'shadowed',
+};

package/dist/models/problemDetailsDto.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ProblemFieldIssueDto } from './problemFieldIssueDto.js';
+export interface ProblemDetailsDto {
+    /** Absolute URI identifying the refusal TYPE. Derived one-to-one from `code`, so a caller may branch on either and can never be told two different things. Never `about:blank`. */
+    type: string;
+    /** Short, human-readable, and STABLE for a given `type`. Never per-occurrence — that is `detail`. */
+    title: string;
+    /** The HTTP status code, repeated in the body so a logged document is self-contained. */
+    status: number;
+    /** SCREAMING_SNAKE_CASE. The machine-branchable refusal, and the value a policy rule, a retry predicate and a UI branch all name. */
+    code: string;
+    /** Human-readable and specific to THIS occurrence. */
+    detail?: string;
+    /** URI reference identifying the occurrence — a request path, a run, a row. */
+    instance?: string;
+    /** W3C trace-context trace-id, present when the caller sent a `traceparent`. Omitted rather than invented when it did not. */
+    traceId?: string;
+    /** Field-level issues, when the refusal is about the request body. */
+    errors?: ProblemFieldIssueDto[];
+}

package/dist/models/problemFieldIssueDto.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+export interface ProblemFieldIssueDto {
+    /** RFC 6901 JSON Pointer into the request body. Root is "/". */
+    pointer: string;
+    detail: string;
+}

package/dist/models/resourceRoleCatalogueResponseDto.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ResourceRoleDeclarationResponseDto } from './resourceRoleDeclarationResponseDto.js';
+export interface ResourceRoleCatalogueResponseDto {
+    roles: ResourceRoleDeclarationResponseDto[];
+}

package/dist/models/resourceRoleCatalogueResponseDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ResourceRoleCatalogueResponseDto } from './resourceRoleCatalogueResponseDto.js';
+export interface ResourceRoleCatalogueResponseDtoDataEnvelope {
+    data: ResourceRoleCatalogueResponseDto;
+}

package/dist/models/resourceRoleDeclarationResponseDto.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem } from './resourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem.js';
+export interface ResourceRoleDeclarationResponseDto {
+    /** The STABLE identifier a binding names, as `<resourceKind>.<role>`. It survives a re-implementation of the thing behind it, so it encodes no biome id, route or service name — a key that moved would silently invalidate every binding that names it. */
+    roleKey: string;
+    /** The heading a person reads on a settings surface. */
+    title: string;
+    /** What choosing a resource for this role DOES, in the reader’s words. An administrator picking an agent for a role they cannot picture is the failure a settings surface exists to end. */
+    description: string;
+    /** The space tiers a CONSUMER resolves this role at — NOT where a binding may be stated (a binding may be stated anywhere on the ladder and is inherited downward). A surface reads this to tell an administrator the truth about what they are stating, per role, instead of presenting identical controls with different real behaviours. */
+    resolvedAtSpaceKinds: ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem[];
+    /** The space that OWNS this declaration — `xema://biomes/<id>` for a biome-contributed role, `xema://system` for a platform seed. Derived from the contribution owner; never authored. */
+    ownerSpaceRef: string;
+    /** The biome that declared it, when a biome did. Absent for a system seed. */
+    biomeId?: string;
+    /** The version of that biome at the time it was declared. */
+    biomeVersion?: string;
+}

package/dist/models/resourceRoleDeclarationResponseDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+export type ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem = typeof ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem[keyof typeof ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem];
+export declare const ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem: {
+    readonly system: "system";
+    readonly org: "org";
+    readonly project: "project";
+    readonly app: "app";
+    readonly session: "session";
+    readonly biome: "biome";
+    readonly user: "user";
+};

package/dist/models/resourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem = void 0;
+exports.ResourceRoleDeclarationResponseDtoResolvedAtSpaceKindsItem = {
+    system: 'system',
+    org: 'org',
+    project: 'project',
+    app: 'app',
+    session: 'session',
+    biome: 'biome',
+    user: 'user',
+};

package/dist/models/resourceRolesCatalogueControllerListParams.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+export type ResourceRolesCatalogueControllerListParams = {
+    /**
+     * Narrow to one kind, e.g. `launch-definition` — matched as the `<kind>.` prefix of the role key, the same narrowing the bindings list accepts.
+     */
+    resourceKind?: string;
+};

package/dist/models/{errorDetailsDtoDetails.d.ts → resourceRolesCatalogueControllerListParams.js}

@@ -1,11 +1,7 @@
+"use strict";
 /**
  * Generated by @xemahq/api-client-generator — do not edit manually.
  * Space Registry API
  * OpenAPI spec version: 0.1.0
  */
-/**
- * @nullable
- */
-export type ErrorDetailsDtoDetails = {
-    [key: string]: unknown;
-} | null;
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/resourceRolesControllerResolveParams.d.ts

@@ -4,6 +4,13 @@
  * OpenAPI spec version: 0.1.0
  */
 export type ResourceRolesControllerResolveParams = {
+    /**
+     * The owner space to resolve AT, as `<fence>::<SpaceRef>`. Resolution walks the ladder from here; the most specific statement wins.
+     */
     ownerSpaceRef: string;
+    /**
+     * The role, as `<resourceKind>.<role>`. Roles are an OPEN vocabulary, so this is validated for GRAMMAR only — an unknown but well-formed role resolves to `configured: false`, which is an answer rather than an error.
+     * @pattern ^[a-z][a-z0-9-]{0,62}\.[a-z][a-z0-9-]{0,62}$
+     */
     roleKey: string;
 };

package/dist/models/spaceClassificationDto.d.ts

@@ -4,6 +4,8 @@
  * OpenAPI spec version: 0.1.0
  */
 import type { DataClassification } from './dataClassification.js';
+import type { ParameterSourceKind } from './parameterSourceKind.js';
+import type { SpaceClassificationStepDto } from './spaceClassificationStepDto.js';
 export interface SpaceClassificationDto {
     /** The Space URI that was resolved. */
     refUri: string;
@@ -14,4 +16,15 @@ export interface SpaceClassificationDto {
        * @nullable
        */
     resolvedFromRefUri?: string | null;
+    /** Did ANYBODY in the chain declare a classification? A different fact from what the value is: `false` means "nobody has armed this", which a UI must not present as "this is public". */
+    configured: boolean;
+    /** `platform-default` (nobody declared anything), `stated` (this ref declared the winning value), `inherited` (an ancestor did). */
+    source: ParameterSourceKind;
+    /** Every rung considered, CLOSEST-FIRST with the ref itself at index 0, silent rungs included. */
+    inheritancePath: SpaceClassificationStepDto[];
+    /**
+       * The ANCESTOR whose floor overrode a declaration this ref itself made — Law 9's "which override decided this". Null when nothing was taken away, including when this ref declared nothing.
+       * @nullable
+       */
+    clampedByRefUri?: string | null;
 }

package/dist/models/spaceClassificationStepDto.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { DataClassification } from './dataClassification.js';
+import type { ParameterStepOutcome } from './parameterStepOutcome.js';
+export interface SpaceClassificationStepDto {
+    /** The Space URI of this rung. */
+    refUri: string;
+    /** The rung's tier (`SpaceKind` value). Carried so a UI can say "your org's floor" without re-parsing the URI. */
+    tier: string;
+    /** What THIS rung declares. Null when it declares nothing — the join's identity, and indistinguishable from having no row at all. */
+    declared?: DataClassification | null;
+    /** What this rung did: `silent` (declared nothing), `decided` (its value IS the effective one — exactly one rung ever is), `shadowed` (it declared something and something else decided). */
+    outcome: ParameterStepOutcome;
+}

package/dist/models/spaceClassificationStepDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/updateOrgGovernanceSettingsDto.d.ts

@@ -6,7 +6,10 @@
 export interface UpdateOrgGovernanceSettingsDto {
     /** Arm (true) or disarm (false) separation of duties on classification downgrades. Arming REQUIRES dataGovernanceGroupId. */
     downgradeSeparationOfDuties: boolean;
-    /** Identity group the approval is addressed to. decision-api expands it against the identity directory at open time; an empty or unknown group fails the downgrade fast rather than producing an ask nobody can answer. */
+    /**
+       * Identity group the approval is addressed to. decision-api expands it against the identity directory at open time; an empty or unknown group fails the downgrade fast rather than producing an ask nobody can answer.
+       * @maxLength 256
+       */
     dataGovernanceGroupId?: string;
     /**
        * Approvals required. Defaults to 2.

package/dist/models/updateOrgGrowthSettingsDto.d.ts

@@ -15,6 +15,8 @@ export interface UpdateOrgGrowthSettingsDto {
        * @maximum 10
        */
     internalPublishReviewQuorum?: number;
+    /** @items.maxLength 128 */
     allowedCapabilityDomains?: string[];
+    /** @items.maxLength 128 */
     allowedConnectorProviders?: string[];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/space-registry-api-client",
-  "version": "0.2.10",
+  "version": "0.2.17",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -19,7 +19,7 @@
     "service": "space-registry-api",
     "biome": "space-registry",
     "target": "server",
-    "generator": "@xemahq/api-client-generator@0.15.2",
+    "generator": "@xemahq/api-client-generator@0.19.0",
     "source": "openapi.public.json"
   },
   "license": "LicenseRef-Xema-BSL-1.1",
@@ -32,6 +32,30 @@
     "directory": "packages/clients/space-registry-api"
   },
   "description": "Generated public API client for the Xema space-registry-api service.",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./models": {
+      "types": "./dist/models/index.d.ts",
+      "default": "./dist/models/index.js"
+    },
+    "./models/*": {
+      "types": "./dist/models/*.d.ts",
+      "default": "./dist/models/*.js"
+    },
+    "./endpoints/*": {
+      "types": "./dist/endpoints/*.d.ts",
+      "default": "./dist/endpoints/*.js"
+    },
+    "./custom-fetch": {
+      "types": "./dist/custom-fetch.d.ts",
+      "default": "./dist/custom-fetch.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "sideEffects": false,
   "scripts": {
     "build": "tsc -p tsconfig.json"
   }

package/dist/models/errorDetailsDto.d.ts

@@ -1,10 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Space Registry API
- * OpenAPI spec version: 0.1.0
- */
-import type { ErrorDetailsDtoDetails } from './errorDetailsDtoDetails.js';
-export interface ErrorDetailsDto {
-    /** @nullable */
-    details: ErrorDetailsDtoDetails;
-}

package/dist/models/errorPayloadDto.d.ts

@@ -1,11 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Space Registry API
- * OpenAPI spec version: 0.1.0
- */
-import type { ErrorDetailsDto } from './errorDetailsDto.js';
-export interface ErrorPayloadDto {
-    code: string;
-    message: string;
-    details: ErrorDetailsDto | null;
-}

package/dist/models/errorResponseDto.d.ts

@@ -1,9 +0,0 @@
-/**
- * Generated by @xemahq/api-client-generator — do not edit manually.
- * Space Registry API
- * OpenAPI spec version: 0.1.0
- */
-import type { ErrorPayloadDto } from './errorPayloadDto.js';
-export interface ErrorResponseDto {
-    error: ErrorPayloadDto;
-}