@xemahq/space-registry-internal-api-client 0.2.4 → 0.2.7

package/dist/custom-fetch.d.ts

@@ -47,6 +47,28 @@ export interface ClientConfig {
     getAuthToken?: () => Promise<string>;
     /** Optional callback returning headers to inject on every request. Per-call headers take precedence. */
     getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /**
+     * Optional resolver for the CORRELATION ID of the request being made — the
+     * handle that ties one causal chain together across every service hop.
+     *
+     * WHY IT IS A CALLBACK AND NOT A VALUE. `ClientConfig` is process-global
+     * (`configureClient` is called once at wiring time), and a correlation id is
+     * per-request. This is invoked INSIDE the request, so a server can point it
+     * at whatever carries its ambient request context and get the CURRENT id
+     * rather than the one that happened to be live at boot.
+     *
+     * WHY THE TRANSPORT DOES NOT MINT ONE. Returning `undefined` sends no header,
+     * and the receiving service's `RequestContextMiddleware` mints its own — a
+     * new trace, which is honest. A transport that minted per call would produce
+     * a FRESH id on every hop while looking like propagation, which is strictly
+     * worse than none: every row would carry a correlation id and no two rows
+     * that belong together would share one. That is the exact defect this exists
+     * to fix, so the transport must not reproduce it one layer down.
+     *
+     * A caller-supplied `X-Correlation-Id` header always wins, and so does one
+     * from `getHeaders`.
+     */
+    getCorrelationId?: () => string | undefined | Promise<string | undefined>;
     /**
      * Optional callback invoked on a 401 before ONE re-attempt. Supplying it is
      * what opts this client into that re-attempt; without it a 401 comes back to

package/dist/custom-fetch.js

@@ -89,6 +89,16 @@ function getClientConfig() {
  */
 /** The only statuses that state the request was NOT processed. See above. */
 const RETRYABLE_STATUSES = [429, 503];
+/**
+ * The platform's correlation header, spelled once.
+ *
+ * Value-identical to what `RequestContextMiddleware` reads in
+ * `@xemahq/platform-common`. It is a literal here rather than an import
+ * because this file has ZERO imports on purpose: it ships byte-identical into
+ * browser-target clients as well as server-target ones, and a dependency on a
+ * NestJS-peer package would follow it into every one of them.
+ */
+const CORRELATION_ID_HEADER = 'X-Correlation-Id';
 /** Backoff floor, doubling per attempt up to {@link MAX_BACKOFF_MS}. */
 const BASE_BACKOFF_MS = 1000;
 /** Ceiling on a single backoff, however many attempts have elapsed. */
@@ -104,6 +114,23 @@ async function buildHeaders(config, callerHeaders) {
             }
         }
     }
+    // Correlation id (caller and global headers still take precedence).
+    //
+    // Without this, every server-to-server hop through a generated client started
+    // a NEW trace: the id is read-or-minted per hop by the receiving service's
+    // RequestContextMiddleware, and nothing carried it outbound — so an audit
+    // journal could record a whole causal chain and offer no way to join it back
+    // together.
+    //
+    // Absent resolver, or a resolver that answers `undefined`: NO header. The
+    // receiver mints and a new trace begins, which is the truthful outcome when
+    // there is nothing to continue.
+    if (config.getCorrelationId && !headers.has(CORRELATION_ID_HEADER)) {
+        const correlationId = await Promise.resolve(config.getCorrelationId());
+        if (correlationId) {
+            headers.set(CORRELATION_ID_HEADER, correlationId);
+        }
+    }
     // Auth token (caller or global headers take precedence)
     if (config.getAuthToken && !headers.has('Authorization')) {
         const token = await config.getAuthToken();

package/dist/endpoints/spaces/spaces.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { CreateSpaceDto, InternalSpacesControllerClassificationOverridesParams, SpaceClassificationOverridePageDtoDataEnvelope, SpaceDtoDataEnvelope, UpdateClassificationDto } from '../../models';
+export declare const getInternalSpacesControllerClassificationOverridesUrl: (params?: InternalSpacesControllerClassificationOverridesParams) => string;
+/**
+ * @summary Every persisted Space classification declaration, across every tenant, for a consumer-owned projection.
+ */
+export declare const internalSpacesControllerClassificationOverrides: (params?: InternalSpacesControllerClassificationOverridesParams, options?: RequestInit) => Promise<SpaceClassificationOverridePageDtoDataEnvelope>;
+export declare const getInternalSpacesControllerCreateUrl: () => string;
+/**
+ * @summary Declare a Space on behalf of a Xema-as-Code apply (idempotent on refUri).
+ */
+export declare const internalSpacesControllerCreate: (createSpaceDto: CreateSpaceDto, options?: RequestInit) => Promise<SpaceDtoDataEnvelope>;
+export declare const getInternalSpacesControllerSetClassificationUrl: (id: string) => string;
+/**
+ * @summary Set/change a Space's own classification on behalf of a Xema-as-Code apply.
+ */
+export declare const internalSpacesControllerSetClassification: (id: string, updateClassificationDto: UpdateClassificationDto, options?: RequestInit) => Promise<SpaceDtoDataEnvelope>;
+export declare const getInternalSpacesControllerRemoveUrl: (id: string) => string;
+/**
+ * @summary Delete a Space override on behalf of a Xema-as-Code apply. Refuses system-managed Spaces.
+ */
+export declare const internalSpacesControllerRemove: (id: string, options?: RequestInit) => Promise<void>;

package/dist/endpoints/spaces/spaces.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.internalSpacesControllerRemove = exports.getInternalSpacesControllerRemoveUrl = exports.internalSpacesControllerSetClassification = exports.getInternalSpacesControllerSetClassificationUrl = exports.internalSpacesControllerCreate = exports.getInternalSpacesControllerCreateUrl = exports.internalSpacesControllerClassificationOverrides = exports.getInternalSpacesControllerClassificationOverridesUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+const getInternalSpacesControllerClassificationOverridesUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/internal/spaces/classification-overrides?${stringifiedParams}` : `/internal/spaces/classification-overrides`;
+};
+exports.getInternalSpacesControllerClassificationOverridesUrl = getInternalSpacesControllerClassificationOverridesUrl;
+/**
+ * @summary Every persisted Space classification declaration, across every tenant, for a consumer-owned projection.
+ */
+const internalSpacesControllerClassificationOverrides = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getInternalSpacesControllerClassificationOverridesUrl)(params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.internalSpacesControllerClassificationOverrides = internalSpacesControllerClassificationOverrides;
+const getInternalSpacesControllerCreateUrl = () => {
+    return `/internal/spaces`;
+};
+exports.getInternalSpacesControllerCreateUrl = getInternalSpacesControllerCreateUrl;
+/**
+ * @summary Declare a Space on behalf of a Xema-as-Code apply (idempotent on refUri).
+ */
+const internalSpacesControllerCreate = async (createSpaceDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getInternalSpacesControllerCreateUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createSpaceDto)
+    });
+};
+exports.internalSpacesControllerCreate = internalSpacesControllerCreate;
+const getInternalSpacesControllerSetClassificationUrl = (id) => {
+    return `/internal/spaces/${id}/classification`;
+};
+exports.getInternalSpacesControllerSetClassificationUrl = getInternalSpacesControllerSetClassificationUrl;
+/**
+ * @summary Set/change a Space's own classification on behalf of a Xema-as-Code apply.
+ */
+const internalSpacesControllerSetClassification = async (id, updateClassificationDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getInternalSpacesControllerSetClassificationUrl)(id), {
+        ...options,
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(updateClassificationDto)
+    });
+};
+exports.internalSpacesControllerSetClassification = internalSpacesControllerSetClassification;
+const getInternalSpacesControllerRemoveUrl = (id) => {
+    return `/internal/spaces/${id}`;
+};
+exports.getInternalSpacesControllerRemoveUrl = getInternalSpacesControllerRemoveUrl;
+/**
+ * @summary Delete a Space override on behalf of a Xema-as-Code apply. Refuses system-managed Spaces.
+ */
+const internalSpacesControllerRemove = async (id, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getInternalSpacesControllerRemoveUrl)(id), {
+        ...options,
+        method: 'DELETE'
+    });
+};
+exports.internalSpacesControllerRemove = internalSpacesControllerRemove;

package/dist/index.d.ts

@@ -2,3 +2,4 @@ export { configureClient, getClientConfig, ClientError, customFetch, type Client
 export * from './models';
 export * from './endpoints/capabilities/capabilities';
 export * from './endpoints/org-erasure/org-erasure';
+export * from './endpoints/spaces/spaces';

package/dist/index.js

@@ -24,3 +24,4 @@ Object.defineProperty(exports, "customFetch", { enumerable: true, get: function
 __exportStar(require("./models"), exports);
 __exportStar(require("./endpoints/capabilities/capabilities"), exports);
 __exportStar(require("./endpoints/org-erasure/org-erasure"), exports);
+__exportStar(require("./endpoints/spaces/spaces"), exports);

package/dist/models/createSpaceDto.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { CreateSpaceDtoLabels } from './createSpaceDtoLabels.js';
+import type { DataClassification } from './dataClassification.js';
+export interface CreateSpaceDto {
+    /** Canonical xema:// Space URI to create. */
+    ref: string;
+    /** Human-readable label for this Space. */
+    displayName: string;
+    /** Own data classification. MUST be >= the INHERITED floor (the join over the ancestor refs) unless allowClassificationBelowParent is set. */
+    classification?: DataClassification;
+    labels?: CreateSpaceDtoLabels;
+    /** Privileged policy flag. When true, permits PERSISTING a classification strictly below the inherited floor. Resolution is a monotone join, so such a value can never lower the effective classification — the flag only suppresses the fail-fast that says so. */
+    allowClassificationBelowParent?: boolean;
+}

package/dist/models/createSpaceDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/createSpaceDtoLabels.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+export type CreateSpaceDtoLabels = {
+    [key: string]: string;
+};

package/dist/models/createSpaceDtoLabels.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/dataClassification.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The classification DECLARED on this ref.
+ */
+export type DataClassification = typeof DataClassification[keyof typeof DataClassification];
+export declare const DataClassification: {
+    readonly public: "public";
+    readonly internal: "internal";
+    readonly confidential: "confidential";
+    readonly secret: "secret";
+    readonly regulated: "regulated";
+};

package/dist/models/dataClassification.js

@@ -0,0 +1,15 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataClassification = void 0;
+exports.DataClassification = {
+    public: 'public',
+    internal: 'internal',
+    confidential: 'confidential',
+    secret: 'secret',
+    regulated: 'regulated',
+};

package/dist/models/index.d.ts

@@ -1 +1,13 @@
+export * from './createSpaceDto';
+export * from './createSpaceDtoLabels';
+export * from './dataClassification';
+export * from './internalSpacesControllerClassificationOverridesParams';
+export * from './spaceClassificationOverrideDto';
+export * from './spaceClassificationOverridePageDto';
+export * from './spaceClassificationOverridePageDtoDataEnvelope';
+export * from './spaceDto';
+export * from './spaceDtoDataEnvelope';
+export * from './spaceDtoLabels';
 export * from './spaceItemPublishCapabilityRequestDto';
+export * from './spaceKind';
+export * from './updateClassificationDto';

package/dist/models/index.js

@@ -15,4 +15,16 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 // Auto-generated by tooling/codegen/regenerate-models-barrel.js — do not edit manually.
+__exportStar(require("./createSpaceDto"), exports);
+__exportStar(require("./createSpaceDtoLabels"), exports);
+__exportStar(require("./dataClassification"), exports);
+__exportStar(require("./internalSpacesControllerClassificationOverridesParams"), exports);
+__exportStar(require("./spaceClassificationOverrideDto"), exports);
+__exportStar(require("./spaceClassificationOverridePageDto"), exports);
+__exportStar(require("./spaceClassificationOverridePageDtoDataEnvelope"), exports);
+__exportStar(require("./spaceDto"), exports);
+__exportStar(require("./spaceDtoDataEnvelope"), exports);
+__exportStar(require("./spaceDtoLabels"), exports);
 __exportStar(require("./spaceItemPublishCapabilityRequestDto"), exports);
+__exportStar(require("./spaceKind"), exports);
+__exportStar(require("./updateClassificationDto"), exports);

package/dist/models/internalSpacesControllerClassificationOverridesParams.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+export type InternalSpacesControllerClassificationOverridesParams = {
+    /**
+     * Max rows per page (1–500, default 500).
+     */
+    limit?: number;
+    /**
+     * Opaque `nextCursor` from the previous page. Page to exhaustion — a consumer that stops early holds an INCOMPLETE set.
+     */
+    cursor?: string;
+};

package/dist/models/internalSpacesControllerClassificationOverridesParams.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceClassificationOverrideDto.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { DataClassification } from './dataClassification.js';
+import type { SpaceKind } from './spaceKind.js';
+export interface SpaceClassificationOverrideDto {
+    /** Canonical `xema://` ref this declaration is made ON. */
+    refUri: string;
+    /** The ref's tier. */
+    tier: SpaceKind;
+    /**
+       * Owning organization, or `null` for the org-less tiers (system / biome / user / session). Org-less rows are platform-global: every org's ancestor walk ends at `xema://system`, so they contribute to every tenant's inherited floor.
+       * @nullable
+       */
+    orgId?: string | null;
+    /** The classification DECLARED on this ref. */
+    classification: DataClassification;
+}

package/dist/models/spaceClassificationOverrideDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceClassificationOverridePageDto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceClassificationOverrideDto } from './spaceClassificationOverrideDto.js';
+export interface SpaceClassificationOverridePageDto {
+    overrides: SpaceClassificationOverrideDto[];
+    /**
+       * Opaque cursor for the NEXT page, or `null` when this is the last one. A consumer that stops before `null` has an INCOMPLETE set and must discard it — a partial reconcile that replaces the full projection would delete every declaration it never read.
+       * @nullable
+       */
+    nextCursor?: string | null;
+}

package/dist/models/spaceClassificationOverridePageDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceClassificationOverridePageDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceClassificationOverridePageDto } from './spaceClassificationOverridePageDto.js';
+export interface SpaceClassificationOverridePageDtoDataEnvelope {
+    data: SpaceClassificationOverridePageDto;
+}

package/dist/models/spaceClassificationOverridePageDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceDto.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { DataClassification } from './dataClassification.js';
+import type { SpaceDtoLabels } from './spaceDtoLabels.js';
+import type { SpaceKind } from './spaceKind.js';
+export interface SpaceDto {
+    /** Opaque Space id (cuid). */
+    id: string;
+    /** Canonical xema:// Space URI. Unique idempotency key. */
+    refUri: string;
+    tier: SpaceKind;
+    /** @nullable */
+    orgId?: string | null;
+    /** @nullable */
+    projectId?: string | null;
+    /** @nullable */
+    appId?: string | null;
+    /** @nullable */
+    sessionId?: string | null;
+    /** @nullable */
+    biomeId?: string | null;
+    /** @nullable */
+    userId?: string | null;
+    displayName: string;
+    /** Own classification, if explicitly set on this Space. */
+    classification?: DataClassification | null;
+    /** @nullable */
+    labels?: SpaceDtoLabels;
+    createdAt: string;
+    updatedAt: string;
+}

package/dist/models/spaceDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceDtoDataEnvelope.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { SpaceDto } from './spaceDto.js';
+export interface SpaceDtoDataEnvelope {
+    data: SpaceDto;
+}

package/dist/models/spaceDtoDataEnvelope.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceDtoLabels.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * @nullable
+ */
+export type SpaceDtoLabels = {
+    [key: string]: string;
+} | null;

package/dist/models/spaceDtoLabels.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/models/spaceKind.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The ref's tier.
+ */
+export type SpaceKind = typeof SpaceKind[keyof typeof SpaceKind];
+export declare const SpaceKind: {
+    readonly system: "system";
+    readonly org: "org";
+    readonly project: "project";
+    readonly app: "app";
+    readonly session: "session";
+    readonly biome: "biome";
+    readonly user: "user";
+};

package/dist/models/spaceKind.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpaceKind = void 0;
+exports.SpaceKind = {
+    system: 'system',
+    org: 'org',
+    project: 'project',
+    app: 'app',
+    session: 'session',
+    biome: 'biome',
+    user: 'user',
+};

package/dist/models/updateClassificationDto.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by @xemahq/api-client-generator — do not edit manually.
+ * Space Registry API
+ * OpenAPI spec version: 0.1.0
+ */
+import type { DataClassification } from './dataClassification.js';
+export interface UpdateClassificationDto {
+    classification: DataClassification;
+    /** Privileged flag required to LOWER the classification (downgrade). Audited. */
+    allowDowngrade?: boolean;
+    /** Privileged flag permitting a value strictly below the inherited floor. Audited. */
+    allowBelowParent?: boolean;
+}

package/dist/models/updateClassificationDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/space-registry-internal-api-client",
-  "version": "0.2.4",
+  "version": "0.2.7",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -19,7 +19,7 @@
     "service": "space-registry-api",
     "biome": "space-registry",
     "target": "server",
-    "generator": "@xemahq/api-client-generator@0.12.1",
+    "generator": "@xemahq/api-client-generator@0.14.1",
     "source": "openapi.internal.json"
   },
   "license": "LicenseRef-Xema-BSL-1.1",