@xemahq/space-registry-internal-api-client 0.1.0

package/README.md

@@ -0,0 +1,62 @@
+<!-- Generated by @xemahq/api-client-generator. Do not edit by hand. -->
+<p align="center">
+<svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/space-registry-internal-api-client">
+  <rect width="680" height="120" rx="14" fill="#0B1020"/>
+  <g transform="translate(28,34)">
+    <path d="M26 0 L52 15 L52 45 L26 60 L0 45 L0 15 Z" fill="#14B8A6" opacity="0.18"/>
+    <path d="M26 12 L41 21 L41 39 L26 48 L11 39 L11 21 Z" fill="#14B8A6"/>
+  </g>
+  <text x="92" y="52" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="22" fill="#F8FAFC" font-weight="700">@xemahq/space-registry-internal-api-client</text>
+  <text x="92" y="80" font-family="ui-sans-serif,system-ui,sans-serif" font-size="15" fill="#94A3B8">Typed, generated internal HTTP client for the Space Registry API.</text>
+  <text x="652" y="105" text-anchor="end" font-family="ui-sans-serif,system-ui,sans-serif" font-size="12" fill="#475569">xema.dev</text>
+</svg>
+</p>
+
+<p align="center">
+  <a href="https://xema.dev">Website</a> &middot;
+  <a href="https://www.npmjs.com/package/@xemahq/space-registry-internal-api-client">npm</a>
+</p>
+
+<p align="center">
+  <img alt="npm" src="https://img.shields.io/npm/v/%40xemahq%2Fspace-registry-internal-api-client?color=2563eb&label=npm">
+  <img alt="license" src="https://img.shields.io/npm/l/%40xemahq%2Fspace-registry-internal-api-client?color=10b981">
+  <img alt="types" src="https://img.shields.io/npm/types/%40xemahq%2Fspace-registry-internal-api-client?color=3178c6">
+</p>
+
+# @xemahq/space-registry-internal-api-client
+
+> Typed, generated internal HTTP client for the Space Registry API.
+
+## Overview
+
+Auto-generated TypeScript client for the **Space Registry API**. It exports typed
+request functions and response models that mirror the service's OpenAPI surface,
+so callers get end-to-end type safety without hand-writing HTTP calls. This
+package is produced by `@xemahq/api-client-generator` and regenerated whenever
+the service's API changes — do not edit it by hand.
+
+## When to use it
+
+- Use it from any TypeScript service or app that calls the Space Registry API over HTTP.
+- You get compile-time types for every endpoint and payload; regenerate to pick
+  up API changes rather than editing the client.
+
+## Installation
+
+```bash
+pnpm add @xemahq/space-registry-internal-api-client
+```
+
+## Usage
+
+```ts
+// Every endpoint function and response model is exported from the package root.
+import * as client from '@xemahq/space-registry-internal-api-client';
+```
+
+Call the typed endpoint functions; request and response shapes are fully typed
+from the service's OpenAPI spec.
+
+## License
+
+Apache-2.0 &copy; Xema — [xema.dev](https://xema.dev)

package/dist/custom-fetch.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Configurable fetch wrapper for Orval-generated clients.
+ *
+ * Consumers must call `configureClient()` before using any endpoint function.
+ * The baseUrl is prepended to the relative paths generated by Orval.
+ *
+ * Features:
+ *   - Automatic bearer-token injection via `getAuthToken` callback
+ *   - Per-request header injection via `getHeaders` callback
+ *   - Automatic 401 handling via `onUnauthorized` callback (single retry)
+ *   - Exponential-backoff retry for transient failures (429, 502, 503, 504)
+ *   - Typed `ClientError` for non-2xx responses
+ *   - Per-call header overrides (take precedence over global headers)
+ *
+ * @example
+ *   configureClient({
+ *     baseUrl: 'http://governance-api:3400',
+ *     getAuthToken: () => identityBootstrapService.getAccessToken(),
+ *     getHeaders: () => ({ 'X-Org-Id': orgId, 'X-Correlation-Id': crypto.randomUUID() }),
+ *   });
+ */
+export interface ClientConfig {
+    /**
+     * Static base URL (e.g. 'http://localhost:3140') — no trailing slash.
+     * Mutually exclusive with `baseUrlResolver`; exactly one MUST be set.
+     */
+    baseUrl?: string;
+    /**
+     * Per-request base-URL resolver. When set, the peer URL is resolved from
+     * the service registry on EVERY request (boot-order-safe). Wired by
+     * `configureOrvalClientResolved` from `@xemahq/platform-common`.
+     */
+    baseUrlResolver?: () => string | Promise<string>;
+    /** Optional async callback to get an auth token. Auto-sets Authorization header on every request. */
+    getAuthToken?: () => Promise<string>;
+    /** Optional callback returning headers to inject on every request. Per-call headers take precedence. */
+    getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /** Optional callback invoked on 401 before a single retry (e.g. force-refresh auth token). */
+    onUnauthorized?: () => Promise<void>;
+    /** Maximum retry attempts for transient failures (default: 3). Set to 0 to disable retries. */
+    maxRetries?: number;
+}
+export declare class ClientError extends Error {
+    readonly status: number;
+    readonly url: string;
+    readonly body: unknown;
+    constructor(status: number, url: string, body: unknown);
+}
+export declare function configureClient(config: ClientConfig): void;
+export declare function getClientConfig(): ClientConfig;
+export declare const customFetch: <T>(url: string, options: RequestInit) => Promise<T>;
+export default customFetch;

package/dist/custom-fetch.js

@@ -0,0 +1,152 @@
+"use strict";
+/**
+ * Configurable fetch wrapper for Orval-generated clients.
+ *
+ * Consumers must call `configureClient()` before using any endpoint function.
+ * The baseUrl is prepended to the relative paths generated by Orval.
+ *
+ * Features:
+ *   - Automatic bearer-token injection via `getAuthToken` callback
+ *   - Per-request header injection via `getHeaders` callback
+ *   - Automatic 401 handling via `onUnauthorized` callback (single retry)
+ *   - Exponential-backoff retry for transient failures (429, 502, 503, 504)
+ *   - Typed `ClientError` for non-2xx responses
+ *   - Per-call header overrides (take precedence over global headers)
+ *
+ * @example
+ *   configureClient({
+ *     baseUrl: 'http://governance-api:3400',
+ *     getAuthToken: () => identityBootstrapService.getAccessToken(),
+ *     getHeaders: () => ({ 'X-Org-Id': orgId, 'X-Correlation-Id': crypto.randomUUID() }),
+ *   });
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.customFetch = exports.ClientError = void 0;
+exports.configureClient = configureClient;
+exports.getClientConfig = getClientConfig;
+class ClientError extends Error {
+    status;
+    url;
+    body;
+    constructor(status, url, body) {
+        super(`HTTP ${status} from ${url}`);
+        this.status = status;
+        this.url = url;
+        this.body = body;
+        this.name = 'ClientError';
+    }
+}
+exports.ClientError = ClientError;
+let clientConfig = null;
+function configureClient(config) {
+    clientConfig = config;
+}
+function getClientConfig() {
+    if (!clientConfig) {
+        throw new Error('Client not configured. Call configureClient({ baseUrl }) before using endpoint functions.');
+    }
+    return clientConfig;
+}
+const RETRYABLE_STATUSES = [429, 502, 503, 504];
+async function buildHeaders(config, callerHeaders) {
+    const headers = new Headers(callerHeaders);
+    // Global headers from config (caller-provided headers take precedence)
+    if (config.getHeaders) {
+        const globalHeaders = await Promise.resolve(config.getHeaders());
+        for (const [key, value] of Object.entries(globalHeaders)) {
+            if (!headers.has(key)) {
+                headers.set(key, value);
+            }
+        }
+    }
+    // Auth token (caller or global headers take precedence)
+    if (config.getAuthToken && !headers.has('Authorization')) {
+        const token = await config.getAuthToken();
+        headers.set('Authorization', `Bearer ${token}`);
+    }
+    return headers;
+}
+const customFetch = async (url, options) => {
+    const config = getClientConfig();
+    const base = config.baseUrlResolver
+        ? await config.baseUrlResolver()
+        : config.baseUrl;
+    if (base === undefined) {
+        throw new Error('Client not configured: set baseUrl or baseUrlResolver via configureClient().');
+    }
+    const fullUrl = `${base}${url}`;
+    const maxRetries = config.maxRetries ?? 3;
+    const headers = await buildHeaders(config, options.headers);
+    const requestInit = { ...options, headers };
+    let delay = 1000;
+    let lastError;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            const response = await fetch(fullUrl, requestInit);
+            // 401 — invoke onUnauthorized and retry once (outside the transient retry loop)
+            if (response.status === 401 && config.onUnauthorized && attempt === 0) {
+                await config.onUnauthorized();
+                const refreshedHeaders = await buildHeaders(config, options.headers);
+                const retryResponse = await fetch(fullUrl, { ...options, headers: refreshedHeaders });
+                const retryBody = await parseBody(retryResponse);
+                if (retryResponse.status >= 400) {
+                    throw new ClientError(retryResponse.status, fullUrl, retryBody);
+                }
+                return retryBody;
+            }
+            // Non-retryable status — return or throw
+            if (!RETRYABLE_STATUSES.includes(response.status) || attempt >= maxRetries) {
+                const body = await parseBody(response);
+                if (response.status >= 400) {
+                    throw new ClientError(response.status, fullUrl, body);
+                }
+                return body;
+            }
+            // Retryable — wait and retry
+            const retryAfter = parseRetryAfter(response.headers.get('Retry-After'));
+            const waitMs = retryAfter ?? addJitter(delay);
+            await sleep(waitMs);
+            delay = Math.min(delay * 2, 30_000);
+        }
+        catch (error) {
+            if (error instanceof ClientError)
+                throw error; // Don't retry client errors
+            lastError = error instanceof Error ? error : new Error(String(error));
+            if (attempt >= maxRetries)
+                throw lastError;
+            const waitMs = addJitter(delay);
+            await sleep(waitMs);
+            delay = Math.min(delay * 2, 30_000);
+        }
+    }
+    throw lastError ?? new Error(`All retries exhausted for ${fullUrl}`);
+};
+exports.customFetch = customFetch;
+async function parseBody(response) {
+    const contentType = response.headers.get('content-type');
+    if (contentType?.includes('application/json')) {
+        return response.json();
+    }
+    if (response.status === 204) {
+        return undefined;
+    }
+    return response.text();
+}
+function parseRetryAfter(value) {
+    if (!value)
+        return undefined;
+    const seconds = Number(value);
+    if (!isNaN(seconds) && seconds >= 0)
+        return seconds * 1000;
+    const date = new Date(value);
+    if (!isNaN(date.getTime()))
+        return Math.max(0, date.getTime() - Date.now());
+    return undefined;
+}
+function addJitter(delay) {
+    return delay + (Math.random() * 2 - 1) * delay * 0.25;
+}
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+exports.default = exports.customFetch;

package/dist/endpoints/capabilities/capabilities.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by orval v8.15.0 🍺
+ * Do not edit manually.
+ * Space Registry API
+ * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceItemPublishCapabilityRequestDto } from '../../models';
+export declare const getSpaceItemPublishCapabilityControllerSpaceItemPublishUrl: () => string;
+export declare const spaceItemPublishCapabilityControllerSpaceItemPublish: (spaceItemPublishCapabilityRequestDto: SpaceItemPublishCapabilityRequestDto, options?: RequestInit) => Promise<void>;

package/dist/endpoints/capabilities/capabilities.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.spaceItemPublishCapabilityControllerSpaceItemPublish = exports.getSpaceItemPublishCapabilityControllerSpaceItemPublishUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getSpaceItemPublishCapabilityControllerSpaceItemPublishUrl = () => {
+    return `/internal/capabilities/space-item-publish`;
+};
+exports.getSpaceItemPublishCapabilityControllerSpaceItemPublishUrl = getSpaceItemPublishCapabilityControllerSpaceItemPublishUrl;
+const spaceItemPublishCapabilityControllerSpaceItemPublish = async (spaceItemPublishCapabilityRequestDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getSpaceItemPublishCapabilityControllerSpaceItemPublishUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(spaceItemPublishCapabilityRequestDto)
+    });
+};
+exports.spaceItemPublishCapabilityControllerSpaceItemPublish = spaceItemPublishCapabilityControllerSpaceItemPublish;

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { configureClient, getClientConfig, ClientError, customFetch, type ClientConfig } from './custom-fetch';
+export * from './models';
+export * from './endpoints/capabilities/capabilities';

package/dist/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.customFetch = exports.ClientError = exports.getClientConfig = exports.configureClient = void 0;
+// Auto-generated by @xemahq/api-client-generator — do not edit manually.
+var custom_fetch_1 = require("./custom-fetch");
+Object.defineProperty(exports, "configureClient", { enumerable: true, get: function () { return custom_fetch_1.configureClient; } });
+Object.defineProperty(exports, "getClientConfig", { enumerable: true, get: function () { return custom_fetch_1.getClientConfig; } });
+Object.defineProperty(exports, "ClientError", { enumerable: true, get: function () { return custom_fetch_1.ClientError; } });
+Object.defineProperty(exports, "customFetch", { enumerable: true, get: function () { return custom_fetch_1.customFetch; } });
+__exportStar(require("./models"), exports);
+__exportStar(require("./endpoints/capabilities/capabilities"), exports);

package/dist/models/index.d.ts

@@ -0,0 +1 @@
+export * from './spaceItemPublishCapabilityRequestDto';

package/dist/models/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Auto-generated by tooling/codegen/regenerate-models-barrel.js — do not edit manually.
+__exportStar(require("./spaceItemPublishCapabilityRequestDto"), exports);

package/dist/models/spaceItemPublishCapabilityRequestDto.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Generated by orval v8.15.0 🍺
+ * Do not edit manually.
+ * Space Registry API
+ * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
+ * OpenAPI spec version: 0.1.0
+ */
+export interface SpaceItemPublishCapabilityRequestDto {
+    /**
+       * Reference to the target space the item is published into (the space `refUri`). The feed item is scoped to this space.
+       * @minLength 1
+       */
+    spaceRef: string;
+    /**
+       * Opaque producer-defined kind of the published source (e.g. an artifact / render kind). Carried verbatim as deep-link metadata.
+       * @minLength 1
+       * @maxLength 200
+       */
+    sourceKind: string;
+    /**
+       * Opaque producer-defined reference id of the published source (e.g. an artifact id). Carried verbatim; opaque to this capability.
+       * @minLength 1
+       */
+    refId: string;
+    /**
+       * Feed item title shown in the space feed.
+       * @minLength 1
+       * @maxLength 300
+       */
+    title: string;
+    /**
+       * Optional feed item detail line shown under the title.
+       * @minLength 1
+       */
+    summary?: string;
+    /** Optional deep-link URL the recipient opens to view the underlying item. Opaque to this capability. */
+    url?: string;
+    /** Optional feed category label. When it names a real feed category the consumer uses it; otherwise the consumer applies its default. */
+    category?: string;
+}

package/dist/models/spaceItemPublishCapabilityRequestDto.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v8.15.0 🍺
+ * Do not edit manually.
+ * Space Registry API
+ * Authoritative Space ownership + data-classification plane: Space CRUD, hierarchy, and most-specific-wins classification resolution.
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@xemahq/space-registry-internal-api-client",
+  "version": "0.1.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "prepublishOnly": "npm run build"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  },
+  "devDependencies": {
+    "typescript": "catalog:"
+  },
+  "xema": {
+    "kind": "api-client",
+    "surface": "internal",
+    "service": "space-registry-api",
+    "biome": "space-registry",
+    "target": "server",
+    "generator": "@xemahq/api-client-generator@0.1.2",
+    "source": "openapi.internal.json"
+  }
+}