@gigadrive/sdk 0.7.27 → 0.8.0

package/dist/index.d.ts

@@ -567,996 +567,1000 @@ declare class ApiKeysResource extends BaseResource {
     delete(apiKeyId: string): Promise<void>;
 }
 
-/** An environment variable attached to an organization, application, or environment. */
-interface EnvVar {
-    /** Unique identifier. */
-    id: string;
-    /** The variable name (e.g. `DATABASE_URL`). */
-    key: string;
-    /** The variable value. `null` when {@link sensitive} is `true` and the value is hidden from API responses. */
-    value: string | null;
-    /** When `true`, the value is redacted in API responses to protect secrets. */
-    sensitive: boolean;
-    /** The scope level at which this variable is defined. */
-    scope: 'organization' | 'application' | 'environment';
-    /** The environment ID, if this variable is scoped to a specific environment. */
-    environmentId: string | null;
-    /** The human-readable environment name, if scoped to a specific environment. */
-    environmentName: string | null;
-    /** ISO 8601 timestamp of when the variable was created. */
-    createdAt: string;
-    /** ISO 8601 timestamp of when the variable was last updated. */
-    updatedAt: string;
+/**
+ * Resolves the various accepted upload inputs (in-memory bytes, a Node.js file
+ * path, or a Node.js readable stream) into the concrete values the upload flow
+ * needs: the object tus-js-client consumes, the byte size, an inferred content
+ * type, and the required checksums.
+ *
+ * @internal
+ */
+
+/** A minimal Node.js `Readable`-like shape (avoids depending on `node:stream` types). */
+interface NodeReadableLike {
+    on(event: string, listener: (...args: unknown[]) => void): unknown;
+    pipe?: unknown;
+    read?: unknown;
 }
-/** Input for creating a new environment variable. */
-interface CreateEnvVarInput {
-    /** The variable name (e.g. `DATABASE_URL`). Must be unique within its scope. */
-    key: string;
-    /** The variable value. */
-    value: string;
-    /** Mark the variable as sensitive to hide its value in API responses. */
-    sensitive?: boolean;
-    /** The scope level. Defaults to the parent resource's scope. */
-    scope?: 'organization' | 'application' | 'environment';
-    /** The environment ID, when creating an environment-scoped variable. */
-    environmentId?: string;
+/** In-memory data accepted by the upload helpers. `Buffer` is a `Uint8Array`. */
+type UploadData = Blob | ArrayBuffer | Uint8Array;
+/** The tus-js-client file input union. */
+type TusFile = File | Blob | Uint8Array | NodeReadableLike;
+
+/**
+ * Thin, injectable wrapper around `tus-js-client` that performs the resumable
+ * byte upload. Isolated here so the upload flow can be unit-tested with a fake
+ * transport (no real network I/O) and so abort/resume behaviour lives in one
+ * place.
+ *
+ * @internal
+ */
+
+/** A persistence backend for resumable upload fingerprints (matches tus-js-client's `UrlStorage`). */
+interface UploadUrlStorage {
+    findAllUploads(): Promise<unknown[]>;
+    findUploadsByFingerprint(fingerprint: string): Promise<unknown[]>;
+    removeUpload(urlStorageKey: string): Promise<void>;
+    addUpload(fingerprint: string, upload: unknown): Promise<string>;
 }
-/** Input for updating an existing environment variable. All fields are optional — only provided fields are changed. */
-interface UpdateEnvVarInput {
-    /** New variable name. */
-    key?: string;
-    /** New variable value. */
-    value?: string;
-    /** Change the sensitive flag. */
-    sensitive?: boolean;
+/** Parameters for a single byte upload. */
+interface TusUploadParams {
+    /** The file/data passed to tus-js-client. */
+    data: TusFile;
+    /** Signed upload URL (already includes the short-lived upload token). */
+    uploadUrl: string;
+    /** Total upload size in bytes. */
+    uploadSize: number;
+    /** Headers to send with each request (must include `Tus-Resumable`). */
+    headers: Record<string, string>;
+    /** Maximum chunk size in bytes. Required for streamed inputs. */
+    chunkSize?: number;
+    /** Retry backoff in milliseconds. `null`/`[]` disables retries. */
+    retryDelays?: number[] | null;
+    /** Progress callback. */
+    onProgress?: (bytesSent: number, bytesTotal: number) => void;
+    /** Abort signal to cancel the upload. */
+    signal?: AbortSignal;
+    /** Persist a resumable fingerprint so the upload can resume later. */
+    resume?: boolean;
+    /** Custom storage for resumable fingerprints (defaults to the tus-js-client default for the runtime). */
+    urlStorage?: UploadUrlStorage;
 }
+/** Performs a single resumable byte upload. Resolves on success, rejects on error/abort. */
+type UploadTransport = (params: TusUploadParams) => Promise<void>;
+/** Options shared by the high-level upload entry points. */
+interface RunUploadOptions {
+    /** Maximum chunk size in bytes. */
+    chunkSize?: number;
+    /** Retry backoff in milliseconds. `null`/`[]` disables retries. */
+    retryDelays?: number[] | null;
+    /** Progress callback. */
+    onProgress?: (bytesSent: number, bytesTotal: number) => void;
+    /** Abort signal to cancel the upload. */
+    signal?: AbortSignal;
+    /** Persist a resumable fingerprint so the upload can resume later. */
+    resume?: boolean;
+    /** Custom storage for resumable fingerprints. */
+    urlStorage?: UploadUrlStorage;
+}
+
 /**
- * A resolved environment variable returned by the pull endpoint. Only
- * non-sensitive variables are returned, so {@link value} is always the real value.
+ * Canonical environment-scoped bucket name or a deprecated bucket UUID.
+ *
+ * REST callers should use the immutable bucket `name`. UUID values remain
+ * accepted while existing integrations migrate. Global delivery/S3 slugs are
+ * not valid REST bucket references.
  */
-interface ResolvedEnvVar {
-    /** The variable name (e.g. `DATABASE_URL`). */
-    key: string;
-    /** The resolved variable value. */
-    value: string;
-    /** Where the resolved value came from after applying org → app → environment inheritance. */
-    source: 'organization' | 'application' | 'environment';
-}
-/** Query options for {@link ApplicationEnvVarsResource.pull}. */
-interface PullEnvVarsQuery {
+type StorageBucketReference = string;
+/** Selects an application environment by slug or UUID for management calls. */
+interface StorageEnvironmentOptions {
     /**
-     * Resolve environment-specific overrides for this environment slug on top of
-     * the organization and application baseline. Omit for the local development
-     * baseline (organization + application-wide variables only).
+     * Environment slug or UUID. Deployed workloads normally omit this because
+     * their credential determines the authoritative environment.
      */
     environment?: string;
 }
-/** Result of pulling resolved environment variables for local development. */
-interface PullEnvVarsResult {
-    /** Resolved, non-sensitive variables, ready to write to a local `.env` file. */
-    items: ResolvedEnvVar[];
-    /** Number of resolved variables returned. */
-    total: number;
-    /**
-     * Number of sensitive variables that were resolved but intentionally omitted.
-     * Secrets are never returned by the pull endpoint.
-     */
-    omittedSensitive: number;
-}
 
-/**
- * Manage environment variables scoped to an application.
- * Accessed via `client.applications.envVars`.
- */
-declare class ApplicationEnvVarsResource extends BaseResource {
+/** A storage bucket belonging to one application environment. */
+interface StorageBucket {
     /**
-     * List all environment variables for an application.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @returns A paginated list of environment variables.
-     *
-     * @example
-     * ```ts
-     * const { items } = await client.applications.envVars.list('app-id');
-     * for (const v of items) {
-     *   console.log(`${v.key}=${v.sensitive ? '***' : v.value}`);
-     * }
-     * ```
+     * Internal bucket UUID. New REST calls should use {@link name} instead.
+     * @deprecated Use the environment-scoped bucket `name` for API addressing.
      */
-    list(applicationId: string, query?: ListQuery): Promise<Paginated<EnvVar>>;
+    id: string;
+    /** The application this bucket belongs to. */
+    applicationId: string;
+    /** Canonical immutable API/IaC identifier, unique within {@link environmentId}. */
+    name: string;
+    /** Global CDN/S3 identifier. This is not the bucket reference used by REST methods. */
+    slug: string;
+    /** `"public"` buckets use stable CDN URLs; `"private"` buckets require signed access URLs. */
+    visibility: 'public' | 'private';
+    /** Hostname used to serve public objects or signed private-object URLs. */
+    cdnHostname: string;
+    /** The application environment this bucket is scoped to. */
+    environmentId: string;
+    /** ISO 8601 creation timestamp. */
+    createdAt: string;
+    /** ISO 8601 last-updated timestamp. */
+    updatedAt: string;
+}
+interface CreateStorageBucketBase {
     /**
-     * Pull the environment variables that apply to an application for local
-     * development. Merges organization-wide, application-wide, and (optionally)
-     * environment-specific overrides, returning only non-sensitive values — ready
-     * to write to a local `.env` file.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param query - Optional environment targeting.
-     * @returns The resolved non-sensitive variables plus the count of omitted secrets.
-     *
-     * @example
-     * ```ts
-     * const { items } = await client.applications.envVars.pull('app-id');
-     * const dotenv = items.map((v) => `${v.key}=${v.value}`).join('\n');
-     * ```
+     * Immutable lowercase URL-safe identifier. The API accepts 3–63 ASCII
+     * letters, numbers, and internal hyphens and does not normalize the value.
      */
-    pull(applicationId: string, query?: PullEnvVarsQuery): Promise<PullEnvVarsResult>;
+    name: string;
+    /** Bucket visibility. Defaults to `"private"`. */
+    visibility?: 'public' | 'private';
     /**
-     * Create a new environment variable for an application.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param data - The variable key, value, and optional settings.
-     * @returns The newly created environment variable.
-     *
-     * @example
-     * ```ts
-     * const envVar = await client.applications.envVars.create('app-id', {
-     *   key: 'DATABASE_URL',
-     *   value: 'postgres://...',
-     *   sensitive: true,
-     * });
-     * ```
+     * Explicit global delivery/S3 slug.
+     * @deprecated Omit this field and let the API generate the global slug.
      */
-    create(applicationId: string, data: CreateEnvVarInput): Promise<EnvVar>;
+    slug?: string;
+}
+/** Input for creating an environment-scoped storage bucket. */
+type CreateStorageBucketInput = CreateStorageBucketBase & ({
+    /** Canonical environment slug or UUID. */
+    environment: string;
     /**
-     * Update an existing environment variable. Only the fields you provide
-     * will be changed; omitted fields are left unchanged.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param envVarId - The environment variable ID (UUID).
-     * @param data - The fields to update.
-     * @returns The updated environment variable.
-     *
-     * @example
-     * ```ts
-     * await client.applications.envVars.update('app-id', 'var-id', {
-     *   value: 'postgres://new-host/db',
-     * });
-     * ```
+     * Deprecated compatibility selector. When both fields are supplied,
+     * they must resolve to the same environment.
+     * @deprecated Use {@link environment}.
      */
-    update(applicationId: string, envVarId: string, data: UpdateEnvVarInput): Promise<EnvVar>;
+    environmentId?: string;
+} | {
+    environment?: undefined;
     /**
-     * Permanently delete an environment variable.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param envVarId - The environment variable ID (UUID).
-     *
-     * @example
-     * ```ts
-     * await client.applications.envVars.delete('app-id', 'var-id');
-     * ```
+     * Application environment UUID.
+     * @deprecated Use `environment` with an environment slug or UUID.
      */
-    delete(applicationId: string, envVarId: string): Promise<void>;
+    environmentId: string;
+});
+/** Query parameters for listing storage buckets. */
+interface ListStorageBucketsQuery extends ListQuery, StorageEnvironmentOptions {
 }
-
-/** A nested reference to the application that served a request. */
-interface NetworkRequestApplicationRef {
-    id: string;
-    name: string;
+/**
+ * Manages storage buckets for an application.
+ *
+ * Methods accept an application ID as their first argument for compatibility.
+ * When the client has an application context, callers can omit it and address
+ * buckets directly by their environment-scoped names.
+ */
+declare class StorageBucketsResource extends BaseResource {
+    private readonly defaultApplicationId?;
+    constructor(httpClient: ConstructorParameters<typeof BaseResource>[0], defaultApplicationId?: string | undefined);
+    /** Lists buckets, optionally restricted to an environment slug or UUID. */
+    list(query?: ListStorageBucketsQuery): Promise<Paginated<StorageBucket>>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    list(applicationId: string, query?: ListStorageBucketsQuery): Promise<Paginated<StorageBucket>>;
+    /** Creates a bucket with an immutable environment-scoped name. */
+    create(data: CreateStorageBucketInput): Promise<StorageBucket>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    create(applicationId: string, data: CreateStorageBucketInput): Promise<StorageBucket>;
+    /** Gets a bucket by canonical environment-scoped name or deprecated UUID. */
+    get(bucketRef: StorageBucketReference, options?: StorageEnvironmentOptions): Promise<StorageBucket>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    get(applicationId: string, bucketRef: StorageBucketReference, options?: StorageEnvironmentOptions): Promise<StorageBucket>;
+    /** Permanently deletes a bucket and all of its live and trashed objects. */
+    delete(bucketRef: StorageBucketReference, options?: StorageEnvironmentOptions): Promise<void>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    delete(applicationId: string, bucketRef: StorageBucketReference, options?: StorageEnvironmentOptions): Promise<void>;
 }
-/** A nested reference to the deployment that served a request. */
-interface NetworkRequestDeploymentRef {
+
+/** A file stored in a storage bucket. */
+interface StorageObject {
+    /** Unique object identifier (UUID). */
     id: string;
-    status: string;
-}
-/** A nested reference to the function route that handled a request. */
-interface NetworkRequestFunctionRef {
-    id: string;
-    name: string | null;
-    path: string;
-    region: string | null;
+    /** Internal UUID of the bucket containing this object. */
+    bucketId: string;
+    /** The application this object belongs to. */
+    applicationId: string;
+    /** The upload session that created this object, or `null` for imported objects. */
+    uploadSessionId: string | null;
+    /** The object key within the bucket, such as `"images/photo.jpg"`. */
+    key: string;
+    /** MIME content type, or `null` when none was recorded. */
+    contentType: string | null;
+    /** File size in bytes. */
+    contentLength: number;
+    /** SHA-1 checksum, if available. */
+    checksumSha1: string | null;
+    /** SHA-256 checksum, if available. */
+    checksumSha256: string | null;
+    /** MD5 checksum, if available. */
+    checksumMd5: string | null;
+    /** ISO 8601 timestamp of upload finalization. */
+    uploadedAt: string;
+    /** ISO 8601 creation timestamp. */
+    createdAt: string;
+    /** ISO 8601 last-updated timestamp. */
+    updatedAt: string;
 }
-/** A nested reference to the static asset that served a request. */
-interface NetworkRequestAssetRef {
-    id: string;
-    path: string;
-    objectKey: string;
+/** Access URL details for a public or private storage object. */
+interface StorageObjectAccess {
+    /** `"public"` for stable CDN URLs or `"signed"` for expiring URLs. */
+    accessType: 'public' | 'signed';
+    /** URL used to read the object. */
+    url: string;
+    /** ISO 8601 expiry for signed URLs, or `null` for public URLs. */
+    expiresAt: string | null;
 }
-/** A nested reference to the storage bucket involved in a request. */
-interface NetworkRequestBucketRef {
-    id: string;
-    name: string;
-    slug: string;
+/** Query parameters for listing objects in a bucket. */
+interface ListStorageObjectsQuery extends StorageEnvironmentOptions {
+    /** Only return objects whose key starts with this prefix. */
+    prefix?: string;
+    /** Group keys by this delimiter into virtual folders. Defaults to `"/"`. */
+    delimiter?: string;
+    /** Opaque cursor from a previous response. */
+    cursor?: string;
+    /** Maximum objects to return, from 1 through 1000. */
+    limit?: number;
 }
-/** A nested reference to the storage object involved in a request. */
-interface NetworkRequestObjectRef {
-    id: string;
-    key: string;
-    contentType: string | null;
+/** Options for creating an object access URL. */
+interface StorageObjectAccessOptions extends StorageEnvironmentOptions {
+    /** Signed URL lifetime in seconds, from 60 through 86,400. */
+    expiresInSeconds?: number;
 }
-/** The HTTP request details captured for a network request. */
-interface NetworkRequestDetails {
-    method: string;
-    hostname: string;
-    path: string;
-    query: string | null;
-    protocol: string | null;
-    country: string | null;
-    userAgent: string | null;
-    referer: string | null;
+/** A page of storage objects, including any common virtual-folder prefixes. */
+interface StorageObjectList extends Paginated<StorageObject> {
+    commonPrefixes: string[];
 }
-/** The HTTP response details captured for a network request. */
-interface NetworkResponseDetails {
-    status: number | null;
-    cacheStatus: 'hit' | 'miss' | 'bypass' | 'revalidated' | 'stale' | 'updating' | null;
-    cacheHit: boolean | null;
-    region: string | null;
-    edgeLocation: string | null;
+/**
+ * Reads and soft-deletes objects and creates access URLs.
+ *
+ * The context-bound overloads use the application configured on the client.
+ * Explicit application overloads remain available for management tools and
+ * compatibility. Bucket references should be canonical names; UUIDs remain a
+ * deprecated server-side fallback.
+ */
+declare class StorageObjectsResource extends BaseResource {
+    private readonly defaultApplicationId?;
+    constructor(httpClient: ConstructorParameters<typeof BaseResource>[0], defaultApplicationId?: string | undefined);
+    /** Lists objects in a bucket. */
+    list(bucketRef: StorageBucketReference, query?: ListStorageObjectsQuery): Promise<StorageObjectList>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    list(applicationId: string, bucketRef: StorageBucketReference, query?: ListStorageObjectsQuery): Promise<StorageObjectList>;
+    /** Gets object metadata by object UUID. */
+    get(bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<StorageObject>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    get(applicationId: string, bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<StorageObject>;
+    /**
+     * Resolves an object by exact key by paging a prefix listing.
+     *
+     * The API has no get-by-key endpoint. This helper preserves the same
+     * application, bucket, and environment across every page.
+     */
+    getByKey(bucketRef: StorageBucketReference, key: string, options?: StorageEnvironmentOptions): Promise<StorageObject | null>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    getByKey(applicationId: string, bucketRef: StorageBucketReference, key: string, options?: StorageEnvironmentOptions): Promise<StorageObject | null>;
+    /** Moves a live object into the bucket trash. */
+    delete(bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<void>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    delete(applicationId: string, bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<void>;
+    /** Creates a stable public or time-limited signed object URL. */
+    getAccessUrl(bucketRef: StorageBucketReference, objectId: string, options?: StorageObjectAccessOptions): Promise<StorageObjectAccess>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    getAccessUrl(applicationId: string, bucketRef: StorageBucketReference, objectId: string, options?: StorageObjectAccessOptions): Promise<StorageObjectAccess>;
 }
-/** Byte and timing metrics for a network request. */
-interface NetworkRequestMetrics {
-    requestBodyBytes: number | null;
-    responseBodyBytes: number | null;
-    bytesSent: number | null;
-    durationMs: number | null;
+
+/** A soft-deleted storage object returned by a bucket trash listing. */
+interface TrashedStorageObject extends StorageObject {
+    /** ISO 8601 timestamp when the object was moved to trash. */
+    deletedAt: string;
+}
+/** Query parameters for listing a bucket's trashed objects. */
+interface ListStorageTrashQuery extends StorageEnvironmentOptions {
+    /** Only return trashed objects whose keys start with this prefix. */
+    prefix?: string;
+    /** Opaque cursor returned by a previous trash listing. */
+    cursor?: string;
+    /** Maximum objects to return, from 1 through 1000. */
+    limit?: number;
 }
-/** A single observed request served through the Gigadrive Network edge (summary form). */
-interface NetworkRequestSummary {
+/** A page of soft-deleted objects. */
+type StorageTrashList = Paginated<TrashedStorageObject>;
+/** Result returned after permanently deleting every object in a bucket's trash. */
+interface EmptyStorageTrashResult {
+    /** Number of trashed objects permanently deleted. */
+    purgedCount: number;
+}
+/**
+ * Manages the lifecycle of soft-deleted storage objects.
+ *
+ * Restoring can fail with HTTP 409 when a live object already uses the same
+ * key. Purge and empty operations are irreversible.
+ */
+declare class StorageTrashResource extends BaseResource {
+    private readonly defaultApplicationId?;
+    constructor(httpClient: ConstructorParameters<typeof BaseResource>[0], defaultApplicationId?: string | undefined);
+    /** Lists soft-deleted objects in a bucket. */
+    list(bucketRef: StorageBucketReference, query?: ListStorageTrashQuery): Promise<StorageTrashList>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    list(applicationId: string, bucketRef: StorageBucketReference, query?: ListStorageTrashQuery): Promise<StorageTrashList>;
+    /** Restores a soft-deleted object to its original key. */
+    restore(bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<StorageObject>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    restore(applicationId: string, bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<StorageObject>;
+    /** Permanently deletes one object from bucket trash. */
+    purge(bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<void>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    purge(applicationId: string, bucketRef: StorageBucketReference, objectId: string, options?: StorageEnvironmentOptions): Promise<void>;
+    /** Permanently deletes every object in a bucket's trash. */
+    empty(bucketRef: StorageBucketReference, options?: StorageEnvironmentOptions): Promise<EmptyStorageTrashResult>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    empty(applicationId: string, bucketRef: StorageBucketReference, options?: StorageEnvironmentOptions): Promise<EmptyStorageTrashResult>;
+}
+
+/**
+ * Represents an upload session for a storage object. Upload sessions track the
+ * lifecycle of a file upload from creation through completion.
+ */
+interface StorageUploadSession {
+    /** Unique identifier (UUID). */
     id: string;
-    application: NetworkRequestApplicationRef;
-    deployment: NetworkRequestDeploymentRef | null;
-    deploymentFunction: NetworkRequestFunctionRef | null;
-    deploymentAsset: NetworkRequestAssetRef | null;
-    storageBucket: NetworkRequestBucketRef | null;
-    storageObject: NetworkRequestObjectRef | null;
-    request: NetworkRequestDetails;
-    response: NetworkResponseDetails;
-    metrics: NetworkRequestMetrics;
-    startedAt: string;
-    completedAt: string | null;
+    /** The bucket this upload targets. */
+    bucketId: string;
+    /** The application this upload belongs to. */
+    applicationId: string;
+    /** The object key/path the file will be stored at (e.g. `"images/photo.jpg"`). */
+    key: string;
+    /** MIME content type declared at creation, or `null` if not specified. */
+    contentType: string | null;
+    /** Expected file size in bytes declared at creation, or `null`. */
+    contentLength: number | null;
+    /** SHA-1 checksum for server-side verification, if provided. */
+    checksumSha1: string | null;
+    /** SHA-256 checksum for server-side verification, if provided. */
+    checksumSha256: string | null;
+    /** MD5 checksum for server-side verification, if provided. */
+    checksumMd5: string | null;
+    /**
+     * Current session state:
+     * - `"pending"` — Session created, awaiting the first bytes.
+     * - `"ready"` — Receiving file data.
+     * - `"completed"` — Upload verified and storage object created.
+     * - `"failed"` — Upload failed or was rejected.
+     * - `"expired"` — Session exceeded its expiration time.
+     */
+    state: 'pending' | 'ready' | 'completed' | 'failed' | 'expired';
+    /** ISO 8601 timestamp when this session (and its upload URL) expires. */
+    expiresAt: string;
+    /** ISO 8601 timestamp when the upload was finalized, or `null`. */
+    uploadedAt: string | null;
+    /** ISO 8601 creation timestamp. */
+    createdAt: string;
+    /** ISO 8601 last-updated timestamp. */
+    updatedAt: string;
 }
-/** A full network request record, including sanitized request/response headers. */
-interface NetworkRequest extends NetworkRequestSummary {
-    /** Sanitized request headers captured for debugging. */
-    requestHeaders: Record<string, string>;
-    /** Sanitized response headers captured for debugging. */
-    responseHeaders: Record<string, string>;
+/** Input for creating a new upload session. */
+interface CreateUploadSessionInput {
+    /** The object key/path the file will be stored at (e.g. `"images/photo.jpg"`). 1–1024 characters. */
+    key: string;
+    /** File size in bytes. Required. */
+    contentLength: number;
+    /** Lowercase hex SHA-256 checksum (64 chars) of the content. Required for server-side verification. */
+    checksumSha256: string;
+    /** MIME content type of the file (e.g. `"image/jpeg"`). */
+    contentType?: string;
+    /** Optional lowercase hex SHA-1 checksum (40 chars). */
+    checksumSha1?: string;
+    /** Optional lowercase hex MD5 checksum (32 chars). */
+    checksumMd5?: string;
 }
-/** Query filters for listing application requests. All fields are optional. */
-interface ListRequestsQuery {
-    /** Filter to requests served by one deployment. */
-    deploymentId?: string;
-    /** Filter to requests served by one function route. */
-    deploymentFunctionId?: string;
-    /** Filter to requests served by one static asset route. */
-    deploymentAssetId?: string;
-    /** Filter to storage delivery requests for one bucket. */
-    storageBucketId?: string;
-    /** Filter to storage delivery requests for one object. */
-    storageObjectId?: string;
-    /** Only include requests that started at or after this ISO 8601 timestamp. */
-    from?: string;
-    /** Only include requests that started before or at this ISO 8601 timestamp. */
-    to?: string;
-    /** Maximum number of records to return. */
-    limit?: number;
-    /** Opaque cursor from a previous response's `nextCursor`. */
-    cursor?: string;
-    /** Filter by HTTP method (e.g. `"GET"`). */
-    method?: string;
-    /** Filter by exact HTTP status code. */
-    status?: number;
-    /** Filter by status family (`2`, `3`, `4`, or `5`). */
-    statusFamily?: number;
-    /** Filter by request hostname. */
-    hostname?: string;
-    /** Filter to requests whose path starts with this prefix. */
-    pathPrefix?: string;
-    /** Filter by ISO 3166-1 alpha-2 country code. */
-    country?: string;
-    /** Filter by origin region. */
-    region?: string;
-    /** Filter by edge location. */
-    edgeLocation?: string;
-    /** Filter by CDN cache state. */
-    cacheStatus?: string;
-    /** Filter by whether the response was served from cache. */
-    cacheHit?: boolean;
+/** Query parameters for listing upload sessions in a bucket. */
+interface ListStorageUploadSessionsQuery extends ListQuery, StorageEnvironmentOptions {
 }
 /**
- * Read observed traffic (request logs) for an application. Accessed via
- * `client.applications.requests`.
+ * Response from creating an upload session. Contains both the session metadata
+ * and the resumable upload instructions (signed URL + headers).
+ */
+interface CreateUploadSessionResponse {
+    /** The created upload session. */
+    session: StorageUploadSession;
+    /** Resumable upload instructions — use these to send the file data. */
+    upload: {
+        /** The HTTP method for the byte upload (resumable upload protocol). */
+        method: 'PATCH';
+        /** Signed upload URL. Send your file data here. */
+        url: string;
+        /** Required headers to include with the upload request. */
+        headers: Record<string, string>;
+        /** The URL where the object will be accessible after upload (CDN URL for public buckets). */
+        publicObjectUrl: string;
+    };
+}
+/** A byte source for uploading directly to a known signed URL. */
+interface UploadByteSource {
+    /** In-memory data (`File`/`Blob`/`Buffer`/`Uint8Array`/`ArrayBuffer`). */
+    data?: UploadData;
+    /** A filesystem path to stream from (Node.js only). */
+    path?: string;
+    /** A readable stream (Node.js only). Requires `contentLength`. */
+    stream?: NodeReadableLike;
+    /** Byte size — required for `stream` inputs, computed otherwise. */
+    contentLength?: number;
+}
+/**
+ * Manage upload sessions and upload bytes to a signed upload URL using the
+ * resumable upload protocol. Accessed via `client.storage.uploadSessions`.
  *
- * @example
- * ```ts
- * // Recent 5xx responses for a deployment
- * const { items } = await client.applications.requests.list('app-id', {
- *   deploymentId: 'dep-id',
- *   statusFamily: 5,
- *   limit: 100,
- * });
- * ```
+ * For most use cases, prefer the high-level `client.storage.upload()`
+ * which creates the session, computes the required checksum, uploads the bytes,
+ * and returns the public URL.
  */
-declare class ApplicationRequestsResource extends BaseResource {
+declare class StorageUploadSessionsResource extends BaseResource {
+    private readonly transport;
+    private readonly defaultApplicationId?;
+    constructor(httpClient: ConstructorParameters<typeof BaseResource>[0], transport?: UploadTransport, defaultApplicationId?: string | undefined);
     /**
-     * List requests for an application, with rich filtering and cursor pagination.
+     * List upload sessions for a bucket.
      *
-     * @param applicationId - The application ID (UUID).
-     * @param query - Optional filters and pagination.
-     * @returns A page of request summaries.
+     * @param bucketRef - Canonical bucket name or deprecated UUID fallback.
+     * @param query - Optional pagination parameters.
+     * @returns A paginated list of upload sessions.
      */
-    list(applicationId: string, query?: ListRequestsQuery): Promise<Paginated<NetworkRequestSummary>>;
+    list(bucketRef: StorageBucketReference, query?: ListStorageUploadSessionsQuery): Promise<Paginated<StorageUploadSession>>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    list(applicationId: string, bucketRef: StorageBucketReference, query?: ListStorageUploadSessionsQuery): Promise<Paginated<StorageUploadSession>>;
     /**
-     * Get a single request by ID, including sanitized request/response headers.
+     * Create an upload session. Returns the session metadata and a signed upload
+     * URL for sending file data. This is the low-level method — for most use
+     * cases prefer `client.storage.upload()` which also computes the
+     * required SHA-256 checksum for you.
      *
-     * @param applicationId - The application ID (UUID).
-     * @param requestId - The request record ID (UUID).
-     * @returns The full request record.
+     * @param bucketRef - Canonical bucket name or deprecated UUID fallback.
+     * @param data - Object key, content length, SHA-256 checksum, and optional content type / extra checksums.
+     * @returns The session and resumable upload instructions (URL, method, headers).
      */
-    get(applicationId: string, requestId: string): Promise<NetworkRequest>;
-}
-
-/**
- * Resolves the various accepted upload inputs (in-memory bytes, a Node.js file
- * path, or a Node.js readable stream) into the concrete values the upload flow
- * needs: the object tus-js-client consumes, the byte size, an inferred content
- * type, and the required checksums.
- *
- * @internal
- */
-
-/** A minimal Node.js `Readable`-like shape (avoids depending on `node:stream` types). */
-interface NodeReadableLike {
-    on(event: string, listener: (...args: unknown[]) => void): unknown;
-    pipe?: unknown;
-    read?: unknown;
+    create(bucketRef: StorageBucketReference, data: CreateUploadSessionInput, options?: StorageEnvironmentOptions): Promise<CreateUploadSessionResponse>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    create(applicationId: string, bucketRef: StorageBucketReference, data: CreateUploadSessionInput, options?: StorageEnvironmentOptions): Promise<CreateUploadSessionResponse>;
+    /**
+     * Get an upload session by ID. Use this to track server-side processing after
+     * an upload (poll until `state === 'completed'`).
+     *
+     * @param bucketRef - Canonical bucket name or deprecated UUID fallback.
+     * @param sessionId - The upload session ID (UUID).
+     * @returns The current session state.
+     */
+    get(bucketRef: StorageBucketReference, sessionId: string, options?: StorageEnvironmentOptions): Promise<StorageUploadSession>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    get(applicationId: string, bucketRef: StorageBucketReference, sessionId: string, options?: StorageEnvironmentOptions): Promise<StorageUploadSession>;
+    /**
+     * Upload bytes directly to a pre-existing signed upload URL — for example, a
+     * URL returned by {@link create} or handed to your client by a backend. Skips
+     * session creation and checksum computation.
+     *
+     * @param url - A signed upload URL.
+     * @param source - The bytes to upload.
+     * @param options - Chunk size, retry config, progress, abort signal, resume,
+     *   and any required `headers` returned with the upload session.
+     * @throws {@link UploadError} if the upload fails after all retries.
+     */
+    uploadToUrl(url: string, source: UploadByteSource, options?: RunUploadOptions & {
+        headers?: Record<string, string>;
+    }): Promise<void>;
+    /**
+     * Resume an interrupted upload to a previously issued signed upload URL. The
+     * resumable protocol negotiates the current offset and continues from there.
+     *
+     * @param url - The signed upload URL from the original {@link create} call.
+     * @param source - The full bytes to upload (the same content as the original).
+     * @param options - Chunk size, retry config, progress, abort signal.
+     */
+    resumeFromUrl(url: string, source: UploadByteSource, options?: RunUploadOptions & {
+        headers?: Record<string, string>;
+    }): Promise<void>;
 }
-/** In-memory data accepted by the upload helpers. `Buffer` is a `Uint8Array`. */
-type UploadData = Blob | ArrayBuffer | Uint8Array;
-/** The tus-js-client file input union. */
-type TusFile = File | Blob | Uint8Array | NodeReadableLike;
-
-/**
- * Thin, injectable wrapper around `tus-js-client` that performs the resumable
- * byte upload. Isolated here so the upload flow can be unit-tested with a fake
- * transport (no real network I/O) and so abort/resume behaviour lives in one
- * place.
- *
- * @internal
- */
 
-/** A persistence backend for resumable upload fingerprints (matches tus-js-client's `UrlStorage`). */
-interface UploadUrlStorage {
-    findAllUploads(): Promise<unknown[]>;
-    findUploadsByFingerprint(fingerprint: string): Promise<unknown[]>;
-    removeUpload(urlStorageKey: string): Promise<void>;
-    addUpload(fingerprint: string, upload: unknown): Promise<string>;
+/** Options controlling whether and how to wait for an upload to finalize server-side. */
+interface WaitForCompletionOptions extends StorageEnvironmentOptions {
+    /** Maximum time to wait in milliseconds. Default: 60000. */
+    timeoutMs?: number;
+    /** How often to poll the session state, in milliseconds. Default: 1000. */
+    pollIntervalMs?: number;
 }
-/** Parameters for a single byte upload. */
-interface TusUploadParams {
-    /** The file/data passed to tus-js-client. */
-    data: TusFile;
-    /** Signed upload URL (already includes the short-lived upload token). */
-    uploadUrl: string;
-    /** Total upload size in bytes. */
-    uploadSize: number;
-    /** Headers to send with each request (must include `Tus-Resumable`). */
-    headers: Record<string, string>;
-    /** Maximum chunk size in bytes. Required for streamed inputs. */
+interface UploadFileOptions {
+    /**
+     * Explicit application UUID. Omit this when the client was configured with
+     * `applicationId` or is running with `GIGADRIVE_APPLICATION_ID`.
+     * @deprecated Configure `GigadriveClientConfig.applicationId` or use workload context.
+     */
+    applicationId?: string;
+    /**
+     * Environment slug or UUID. Workloads normally omit this because the API
+     * infers and enforces the deployment environment from their credential. If
+     * completion options also specify an environment, this top-level value takes
+     * precedence for the entire upload lifecycle.
+     */
+    environment?: string;
+    /** The object key/path in the bucket (e.g. `"images/logo.png"`). */
+    key: string;
+    /** In-memory data (browser `File`/`Blob`, Node `Buffer`, `Uint8Array`, `ArrayBuffer`). */
+    data?: UploadData;
+    /** A filesystem path to upload from (Node.js only). Size, checksum, and content type are derived automatically. */
+    path?: string;
+    /** A readable stream to upload from (Node.js only). Requires `contentLength` and `checksumSha256`. */
+    stream?: NodeReadableLike;
+    /** MIME content type. Inferred from `key` when omitted. */
+    contentType?: string;
+    /** Byte size. Required for `stream`; computed otherwise. */
+    contentLength?: number;
+    /** Pre-computed SHA-256 (skips hashing). Required for `stream`. */
+    checksumSha256?: string;
+    /** Also send a SHA-1 checksum. */
+    checksumSha1?: string;
+    /** Also send an MD5 checksum (Node.js only unless provided). */
+    checksumMd5?: string;
+    /** Maximum chunk size in bytes (for very large files / streams). */
     chunkSize?: number;
-    /** Retry backoff in milliseconds. `null`/`[]` disables retries. */
+    /** Retry backoff in milliseconds; `null`/`[]` disables retries. */
     retryDelays?: number[] | null;
-    /** Progress callback. */
+    /** Progress callback invoked during the byte upload. */
     onProgress?: (bytesSent: number, bytesTotal: number) => void;
     /** Abort signal to cancel the upload. */
     signal?: AbortSignal;
-    /** Persist a resumable fingerprint so the upload can resume later. */
+    /** Persist a resumable fingerprint so the upload can be resumed later. */
     resume?: boolean;
-    /** Custom storage for resumable fingerprints (defaults to the tus-js-client default for the runtime). */
+    /** Custom storage backend for resumable fingerprints. */
     urlStorage?: UploadUrlStorage;
+    /** Wait until the object is finalized server-side before resolving. Pass options to tune polling. */
+    waitForCompletion?: boolean | WaitForCompletionOptions;
 }
-/** Performs a single resumable byte upload. Resolves on success, rejects on error/abort. */
-type UploadTransport = (params: TusUploadParams) => Promise<void>;
-/** Options shared by the high-level upload entry points. */
-interface RunUploadOptions {
-    /** Maximum chunk size in bytes. */
-    chunkSize?: number;
-    /** Retry backoff in milliseconds. `null`/`[]` disables retries. */
-    retryDelays?: number[] | null;
-    /** Progress callback. */
-    onProgress?: (bytesSent: number, bytesTotal: number) => void;
-    /** Abort signal to cancel the upload. */
-    signal?: AbortSignal;
-    /** Persist a resumable fingerprint so the upload can resume later. */
-    resume?: boolean;
-    /** Custom storage for resumable fingerprints. */
-    urlStorage?: UploadUrlStorage;
+/** Input for the high-level {@link ApplicationStorageResource.upload | upload()} method. */
+type UploadFileInput = UploadFileOptions & ({
+    /** Canonical environment-scoped bucket name, or a deprecated UUID fallback. */
+    bucket: StorageBucketReference;
+    bucketId?: never;
+} | {
+    bucket?: never;
+    /**
+     * Internal bucket UUID.
+     * @deprecated Use `bucket` with the canonical environment-scoped name.
+     */
+    bucketId: string;
+});
+/** Result of a successful upload. */
+interface UploadFileResult {
+    /** The upload session. When `waitForCompletion` was set, `state` is `"completed"`. */
+    session: StorageUploadSession;
+    /** The public/CDN URL of the uploaded object. */
+    url: string;
+    /** The finalized storage object — present only when `waitForCompletion` was set. */
+    object?: StorageObject;
 }
-
-/** A storage bucket belonging to an application. Buckets hold objects (files). */
-interface StorageBucket {
-    /** Unique identifier (UUID). */
-    id: string;
-    /** The application this bucket belongs to. */
-    applicationId: string;
-    /** Human-readable bucket name. */
-    name: string;
-    /** Globally unique, hostname-safe label used to build the bucket's serving hostname. */
-    slug: string;
-    /** `"public"` buckets serve objects through the CDN hostname; `"private"` buckets require signed access URLs. */
-    visibility: 'public' | 'private';
-    /** The hostname clients use to read public objects or signed private-object URLs. */
-    cdnHostname: string;
-    /** The application environment this bucket is scoped to. */
-    environmentId: string;
-    /** ISO 8601 creation timestamp. */
-    createdAt: string;
-    /** ISO 8601 last-updated timestamp. */
-    updatedAt: string;
+/** Options for {@link ApplicationStorageResource.uploadBatch | uploadBatch()}. */
+interface UploadBatchOptions {
+    /** Maximum number of concurrent uploads. Default: 4. */
+    concurrency?: number;
+    /** Called after each file settles, with the number completed and the total. */
+    onProgress?: (completed: number, total: number) => void;
 }
-/** Input for creating a new storage bucket. */
-interface CreateStorageBucketInput {
-    /** Human-readable name for the bucket. */
-    name: string;
-    /** The application environment to scope this bucket to. */
-    environmentId: string;
-    /** Optional hostname-safe slug used in the generated serving hostname. Auto-generated when omitted. */
-    slug?: string;
-    /** Bucket visibility. Defaults to `"private"`. */
-    visibility?: 'public' | 'private';
+/** The outcome of one file within a batch upload. Errors are isolated per file. */
+interface UploadBatchItemResult {
+    /** The input that produced this result. */
+    input: UploadFileInput;
+    /** The successful result, if the upload succeeded. */
+    result?: UploadFileResult;
+    /** The error, if this upload failed. */
+    error?: unknown;
 }
 /**
- * Manage storage buckets for an application.
- * Accessed via `client.applications.storage.buckets`.
+ * Namespace for all storage operations on an application: bucket management,
+ * object listing/access, low-level upload sessions, and the high-level
+ * {@link upload} / {@link uploadBatch} helpers.
+ *
+ * Accessed canonically via `client.storage`. `client.applications.storage`
+ * references the same resource for compatibility.
  *
  * @example
  * ```ts
- * // Create a public bucket
- * const bucket = await client.applications.storage.buckets.create('app-id', {
- *   name: 'User Uploads',
- *   environmentId: 'env-id',
- *   visibility: 'public',
+ * // High-level upload (Node.js, from a path — checksum/size/content-type inferred)
+ * const { url } = await client.storage.upload({
+ *   bucket: 'photos',
+ *   key: 'photos/cat.jpg',
+ *   path: './cat.jpg',
  * });
  *
- * // List all buckets
- * const { items } = await client.applications.storage.buckets.list('app-id');
+ * // Browser upload from a file input, with progress and abort
+ * const controller = new AbortController();
+ * const { url } = await client.storage.upload({
+ *   bucket: 'uploads',
+ *   key: `uploads/${file.name}`,
+ *   data: file,
+ *   onProgress: (sent, total) => console.log(`${Math.round((sent / total) * 100)}%`),
+ *   signal: controller.signal,
+ * });
  * ```
  */
-declare class StorageBucketsResource extends BaseResource {
+declare class ApplicationStorageResource {
+    private readonly defaultApplicationId?;
+    /** Create, list, get, and delete storage buckets. */
+    readonly buckets: StorageBucketsResource;
+    /** List, get, delete objects, and generate access URLs. */
+    readonly objects: StorageObjectsResource;
+    /** Low-level upload sessions and direct-to-URL byte uploads. */
+    readonly uploadSessions: StorageUploadSessionsResource;
+    /** Lists, restores, and permanently purges soft-deleted objects. */
+    readonly trash: StorageTrashResource;
+    private readonly transport;
+    constructor(httpClient: HttpClient, transport?: UploadTransport, defaultApplicationId?: string | undefined);
     /**
-     * List all storage buckets for an application.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param query - Optional pagination parameters.
-     * @returns A paginated list of storage buckets.
+     * Upload a file to a storage bucket. Handles the full flow: computes the
+     * required SHA-256 checksum, creates an upload session, uploads the bytes with
+     * automatic retries (and optional progress/abort/resume), and returns the
+     * public URL.
      *
-     * @example
-     * ```ts
-     * const { items, total } = await client.applications.storage.buckets.list('app-id');
-     * console.log(`${total} buckets found`);
-     * ```
-     */
-    list(applicationId: string, query?: ListQuery): Promise<Paginated<StorageBucket>>;
-    /**
-     * Create a new storage bucket.
+     * Accepts browser `File`/`Blob`, Node `Buffer`/`Uint8Array`/`ArrayBuffer`, a
+     * Node filesystem `path`, or a Node readable `stream` (with `contentLength`
+     * and `checksumSha256`). The content type is inferred from `key` when omitted.
      *
-     * @param applicationId - The application ID (UUID).
-     * @param data - Bucket name, environment, and optional slug/visibility.
-     * @returns The newly created bucket.
+     * @param input - What and where to upload, plus optional transfer options.
+     * @returns The upload session and public object URL (and the finalized object when `waitForCompletion` is set).
+     * @throws {@link UploadError} if the byte upload fails.
+     * @throws {@link UploadSessionExpiredError} if the session expires mid-upload.
      *
      * @example
      * ```ts
-     * const bucket = await client.applications.storage.buckets.create('app-id', {
-     *   name: 'Assets',
-     *   environmentId: 'env-id',
-     *   visibility: 'public',
+     * const { session, url, object } = await client.storage.upload({
+     *   bucket: 'reports', key: 'q1.pdf', path: './q1.pdf',
+     *   waitForCompletion: true,
      * });
-     * console.log(`Bucket CDN: https://${bucket.cdnHostname}`);
+     * console.log(object?.contentLength, 'bytes available at', url);
      * ```
      */
-    create(applicationId: string, data: CreateStorageBucketInput): Promise<StorageBucket>;
+    upload(input: UploadFileInput): Promise<UploadFileResult>;
     /**
-     * Get a storage bucket by ID.
+     * Upload many files concurrently. Each file is uploaded independently; a
+     * failure for one file does not abort the others — inspect each item's
+     * `error`/`result`.
      *
-     * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @returns The bucket details.
+     * @param inputs - The files to upload.
+     * @param options - Concurrency limit and an aggregated progress callback.
+     * @returns One result per input, in the same order.
      *
      * @example
      * ```ts
-     * const bucket = await client.applications.storage.buckets.get('app-id', 'bucket-id');
-     * console.log(`${bucket.name} (${bucket.visibility})`);
+     * const results = await client.storage.uploadBatch(
+     *   files.map((f) => ({ bucket: 'uploads', key: f.name, data: f })),
+     *   { concurrency: 6, onProgress: (done, total) => console.log(`${done}/${total}`) },
+     * );
+     * const failed = results.filter((r) => r.error);
      * ```
      */
-    get(applicationId: string, bucketId: string): Promise<StorageBucket>;
+    uploadBatch(inputs: UploadFileInput[], options?: UploadBatchOptions): Promise<UploadBatchItemResult[]>;
     /**
-     * Permanently delete a storage bucket and all its objects.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
+     * Poll an upload session until the object is finalized server-side.
      *
-     * @example
-     * ```ts
-     * await client.applications.storage.buckets.delete('app-id', 'bucket-id');
-     * ```
+     * @param bucketRef - Canonical bucket name or deprecated UUID fallback.
+     * @param sessionId - The upload session ID (UUID).
+     * @param options - Timeout and polling interval.
+     * @returns The completed session.
+     * @throws {@link UploadError} if the session fails, expires, or the timeout elapses.
      */
-    delete(applicationId: string, bucketId: string): Promise<void>;
+    waitForCompletion(bucketRef: StorageBucketReference, sessionId: string, options?: WaitForCompletionOptions): Promise<StorageUploadSession>;
+    /** @deprecated Prefer the context-bound overload through `client.storage`. */
+    waitForCompletion(applicationId: string, bucketRef: StorageBucketReference, sessionId: string, options?: WaitForCompletionOptions): Promise<StorageUploadSession>;
 }
 
-/** A file (object) stored in a storage bucket. */
-interface StorageObject {
-    /** Unique identifier (UUID). */
+/** An environment variable attached to an organization, application, or environment. */
+interface EnvVar {
+    /** Unique identifier. */
     id: string;
-    /** The bucket this object belongs to. */
-    bucketId: string;
-    /** The application this object belongs to. */
-    applicationId: string;
-    /** The upload session that created this object, or `null` for imported objects. */
-    uploadSessionId: string | null;
-    /** The object key (path) within the bucket (e.g. `"images/photo.jpg"`). */
+    /** The variable name (e.g. `DATABASE_URL`). */
     key: string;
-    /** MIME content type (e.g. `"image/jpeg"`), or `null` if not set. */
-    contentType: string | null;
-    /** File size in bytes. */
-    contentLength: number;
-    /** SHA-1 checksum of the file contents, if available. */
-    checksumSha1: string | null;
-    /** SHA-256 checksum of the file contents, if available. */
-    checksumSha256: string | null;
-    /** MD5 checksum of the file contents, if available. */
-    checksumMd5: string | null;
-    /** ISO 8601 timestamp of when the upload was finalized. */
-    uploadedAt: string;
-    /** ISO 8601 creation timestamp. */
+    /** The variable value. `null` when {@link sensitive} is `true` and the value is hidden from API responses. */
+    value: string | null;
+    /** When `true`, the value is redacted in API responses to protect secrets. */
+    sensitive: boolean;
+    /** The scope level at which this variable is defined. */
+    scope: 'organization' | 'application' | 'environment';
+    /** The environment ID, if this variable is scoped to a specific environment. */
+    environmentId: string | null;
+    /** The human-readable environment name, if scoped to a specific environment. */
+    environmentName: string | null;
+    /** ISO 8601 timestamp of when the variable was created. */
     createdAt: string;
-    /** ISO 8601 last-updated timestamp. */
+    /** ISO 8601 timestamp of when the variable was last updated. */
     updatedAt: string;
 }
+/** Input for creating a new environment variable. */
+interface CreateEnvVarInput {
+    /** The variable name (e.g. `DATABASE_URL`). Must be unique within its scope. */
+    key: string;
+    /** The variable value. */
+    value: string;
+    /** Mark the variable as sensitive to hide its value in API responses. */
+    sensitive?: boolean;
+    /** The scope level. Defaults to the parent resource's scope. */
+    scope?: 'organization' | 'application' | 'environment';
+    /** The environment ID, when creating an environment-scoped variable. */
+    environmentId?: string;
+}
+/** Input for updating an existing environment variable. All fields are optional — only provided fields are changed. */
+interface UpdateEnvVarInput {
+    /** New variable name. */
+    key?: string;
+    /** New variable value. */
+    value?: string;
+    /** Change the sensitive flag. */
+    sensitive?: boolean;
+}
 /**
- * Access URL details for a storage object. For public buckets, the URL is a
- * stable CDN URL. For private buckets, the URL is time-limited and signed.
+ * A resolved environment variable returned by the pull endpoint. Only
+ * non-sensitive variables are returned, so {@link value} is always the real value.
  */
-interface StorageObjectAccess {
-    /** `"public"` for stable CDN URLs, `"signed"` for time-limited signed URLs. */
-    accessType: 'public' | 'signed';
-    /** The URL to access the object. */
-    url: string;
-    /** ISO 8601 expiry timestamp for signed URLs. `null` for public URLs. */
-    expiresAt: string | null;
+interface ResolvedEnvVar {
+    /** The variable name (e.g. `DATABASE_URL`). */
+    key: string;
+    /** The resolved variable value. */
+    value: string;
+    /** Where the resolved value came from after applying org → app → environment inheritance. */
+    source: 'organization' | 'application' | 'environment';
 }
-/** Query parameters for listing objects in a bucket. */
-interface ListStorageObjectsQuery {
-    /** Only return objects whose key starts with this prefix. */
-    prefix?: string;
-    /** Group keys by this delimiter into `commonPrefixes` (virtual folders). Defaults to `"/"`. */
-    delimiter?: string;
-    /** Opaque cursor from a previous response's `nextCursor`. */
-    cursor?: string;
-    /** Maximum number of objects to return (1–1000, default 200). */
-    limit?: number;
+/** Query options for {@link ApplicationEnvVarsResource.pull}. */
+interface PullEnvVarsQuery {
+    /**
+     * Resolve environment-specific overrides for this environment slug on top of
+     * the organization and application baseline. Omit for the local development
+     * baseline (organization + application-wide variables only).
+     */
+    environment?: string;
 }
-/** A page of storage objects, including any common (folder) prefixes. */
-interface StorageObjectList extends Paginated<StorageObject> {
-    /** Virtual "folder" prefixes at the current level when a delimiter is used. */
-    commonPrefixes: string[];
+/** Result of pulling resolved environment variables for local development. */
+interface PullEnvVarsResult {
+    /** Resolved, non-sensitive variables, ready to write to a local `.env` file. */
+    items: ResolvedEnvVar[];
+    /** Number of resolved variables returned. */
+    total: number;
+    /**
+     * Number of sensitive variables that were resolved but intentionally omitted.
+     * Secrets are never returned by the pull endpoint.
+     */
+    omittedSensitive: number;
 }
+
 /**
- * Read and delete objects in storage buckets, and generate access URLs.
- * Accessed via `client.applications.storage.objects`.
- *
- * Objects are addressed by their object ID (UUID). If you only have the object
- * key, use {@link getByKey} to resolve it, or read the `id` from a listing.
- *
- * To upload objects, use `client.applications.storage.upload()`.
- *
- * @example
- * ```ts
- * // List all objects in a bucket
- * const { items } = await client.applications.storage.objects.list('app-id', 'bucket-id');
- * for (const obj of items) {
- *   console.log(`${obj.key} (${obj.contentLength} bytes)`);
- * }
- *
- * // Get a signed download URL for a private object
- * const { url } = await client.applications.storage.objects.getAccessUrl('app-id', 'bucket-id', 'object-id');
- * ```
+ * Manage environment variables scoped to an application.
+ * Accessed via `client.applications.envVars`.
  */
-declare class StorageObjectsResource extends BaseResource {
+declare class ApplicationEnvVarsResource extends BaseResource {
     /**
-     * List objects in a storage bucket, optionally filtered by key prefix and
-     * grouped into virtual folders by a delimiter.
+     * List all environment variables for an application.
      *
      * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param query - Optional prefix/delimiter/cursor/limit parameters.
-     * @returns A page of objects plus any common (folder) prefixes and a `nextCursor`.
+     * @returns A paginated list of environment variables.
      *
      * @example
      * ```ts
-     * // List the "images/" folder, one level deep
-     * const { items, commonPrefixes, nextCursor } = await client.applications.storage.objects.list(
-     *   'app-id', 'bucket-id', { prefix: 'images/', limit: 100 },
-     * );
+     * const { items } = await client.applications.envVars.list('app-id');
+     * for (const v of items) {
+     *   console.log(`${v.key}=${v.sensitive ? '***' : v.value}`);
+     * }
      * ```
      */
-    list(applicationId: string, bucketId: string, query?: ListStorageObjectsQuery): Promise<StorageObjectList>;
+    list(applicationId: string, query?: ListQuery): Promise<Paginated<EnvVar>>;
     /**
-     * Get metadata for a specific object by its object ID.
+     * Pull the environment variables that apply to an application for local
+     * development. Merges organization-wide, application-wide, and (optionally)
+     * environment-specific overrides, returning only non-sensitive values — ready
+     * to write to a local `.env` file.
      *
      * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param objectId - The object ID (UUID) — not the object key. Use {@link getByKey} to resolve a key.
-     * @returns The object metadata.
+     * @param query - Optional environment targeting.
+     * @returns The resolved non-sensitive variables plus the count of omitted secrets.
      *
      * @example
      * ```ts
-     * const obj = await client.applications.storage.objects.get('app-id', 'bucket-id', 'object-id');
-     * console.log(`${obj.key}: ${obj.contentLength} bytes, type: ${obj.contentType}`);
+     * const { items } = await client.applications.envVars.pull('app-id');
+     * const dotenv = items.map((v) => `${v.key}=${v.value}`).join('\n');
      * ```
      */
-    get(applicationId: string, bucketId: string, objectId: string): Promise<StorageObject>;
+    pull(applicationId: string, query?: PullEnvVarsQuery): Promise<PullEnvVarsResult>;
     /**
-     * Resolve an object by its key (path) instead of its ID. Convenience over
-     * {@link list} — lists with the key as the prefix and returns the exact match,
-     * paging through results until found, or `null` if no object with that key
-     * exists. (The API has no get-by-key endpoint.)
+     * Create a new environment variable for an application.
      *
      * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param key - The object key/path (e.g. `"images/photo.jpg"`).
-     * @returns The matching object, or `null` if not found.
+     * @param data - The variable key, value, and optional settings.
+     * @returns The newly created environment variable.
+     *
+     * @example
+     * ```ts
+     * const envVar = await client.applications.envVars.create('app-id', {
+     *   key: 'DATABASE_URL',
+     *   value: 'postgres://...',
+     *   sensitive: true,
+     * });
+     * ```
      */
-    getByKey(applicationId: string, bucketId: string, key: string): Promise<StorageObject | null>;
+    create(applicationId: string, data: CreateEnvVarInput): Promise<EnvVar>;
     /**
-     * Permanently delete an object from a storage bucket.
+     * Update an existing environment variable. Only the fields you provide
+     * will be changed; omitted fields are left unchanged.
      *
      * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param objectId - The object ID (UUID) — not the object key.
+     * @param envVarId - The environment variable ID (UUID).
+     * @param data - The fields to update.
+     * @returns The updated environment variable.
      *
      * @example
      * ```ts
-     * await client.applications.storage.objects.delete('app-id', 'bucket-id', 'object-id');
+     * await client.applications.envVars.update('app-id', 'var-id', {
+     *   value: 'postgres://new-host/db',
+     * });
      * ```
      */
-    delete(applicationId: string, bucketId: string, objectId: string): Promise<void>;
+    update(applicationId: string, envVarId: string, data: UpdateEnvVarInput): Promise<EnvVar>;
     /**
-     * Get an access URL for a storage object. For objects in public buckets,
-     * returns a stable CDN URL. For private buckets, returns a time-limited
-     * signed URL.
+     * Permanently delete an environment variable.
      *
      * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param objectId - The object ID (UUID) — not the object key.
-     * @param options - Optional `expiresInSeconds` for signed URLs (60–86400).
-     * @returns The access URL and its type/expiry.
+     * @param envVarId - The environment variable ID (UUID).
      *
      * @example
      * ```ts
-     * const access = await client.applications.storage.objects.getAccessUrl('app-id', 'bucket-id', 'object-id', {
-     *   expiresInSeconds: 3600,
-     * });
-     * if (access.accessType === 'signed') {
-     *   console.log(`Signed URL expires at ${access.expiresAt}`);
-     * }
-     * console.log(`Download: ${access.url}`);
+     * await client.applications.envVars.delete('app-id', 'var-id');
      * ```
      */
-    getAccessUrl(applicationId: string, bucketId: string, objectId: string, options?: {
-        expiresInSeconds?: number;
-    }): Promise<StorageObjectAccess>;
+    delete(applicationId: string, envVarId: string): Promise<void>;
 }
 
-/**
- * Represents an upload session for a storage object. Upload sessions track the
- * lifecycle of a file upload from creation through completion.
- */
-interface StorageUploadSession {
-    /** Unique identifier (UUID). */
+/** A nested reference to the application that served a request. */
+interface NetworkRequestApplicationRef {
     id: string;
-    /** The bucket this upload targets. */
-    bucketId: string;
-    /** The application this upload belongs to. */
-    applicationId: string;
-    /** The object key/path the file will be stored at (e.g. `"images/photo.jpg"`). */
-    key: string;
-    /** MIME content type declared at creation, or `null` if not specified. */
-    contentType: string | null;
-    /** Expected file size in bytes declared at creation, or `null`. */
-    contentLength: number | null;
-    /** SHA-1 checksum for server-side verification, if provided. */
-    checksumSha1: string | null;
-    /** SHA-256 checksum for server-side verification, if provided. */
-    checksumSha256: string | null;
-    /** MD5 checksum for server-side verification, if provided. */
-    checksumMd5: string | null;
-    /**
-     * Current session state:
-     * - `"pending"` — Session created, awaiting the first bytes.
-     * - `"ready"` — Receiving file data.
-     * - `"completed"` — Upload verified and storage object created.
-     * - `"failed"` — Upload failed or was rejected.
-     * - `"expired"` — Session exceeded its expiration time.
-     */
-    state: 'pending' | 'ready' | 'completed' | 'failed' | 'expired';
-    /** ISO 8601 timestamp when this session (and its upload URL) expires. */
-    expiresAt: string;
-    /** ISO 8601 timestamp when the upload was finalized, or `null`. */
-    uploadedAt: string | null;
-    /** ISO 8601 creation timestamp. */
-    createdAt: string;
-    /** ISO 8601 last-updated timestamp. */
-    updatedAt: string;
-}
-/** Input for creating a new upload session. */
-interface CreateUploadSessionInput {
-    /** The object key/path the file will be stored at (e.g. `"images/photo.jpg"`). 1–1024 characters. */
-    key: string;
-    /** File size in bytes. Required. */
-    contentLength: number;
-    /** Lowercase hex SHA-256 checksum (64 chars) of the content. Required for server-side verification. */
-    checksumSha256: string;
-    /** MIME content type of the file (e.g. `"image/jpeg"`). */
-    contentType?: string;
-    /** Optional lowercase hex SHA-1 checksum (40 chars). */
-    checksumSha1?: string;
-    /** Optional lowercase hex MD5 checksum (32 chars). */
-    checksumMd5?: string;
+    name: string;
 }
-/**
- * Response from creating an upload session. Contains both the session metadata
- * and the resumable upload instructions (signed URL + headers).
- */
-interface CreateUploadSessionResponse {
-    /** The created upload session. */
-    session: StorageUploadSession;
-    /** Resumable upload instructions — use these to send the file data. */
-    upload: {
-        /** The HTTP method for the byte upload (resumable upload protocol). */
-        method: 'PATCH';
-        /** Signed upload URL. Send your file data here. */
-        url: string;
-        /** Required headers to include with the upload request. */
-        headers: Record<string, string>;
-        /** The URL where the object will be accessible after upload (CDN URL for public buckets). */
-        publicObjectUrl: string;
-    };
+/** A nested reference to the deployment that served a request. */
+interface NetworkRequestDeploymentRef {
+    id: string;
+    status: string;
 }
-/** A byte source for uploading directly to a known signed URL. */
-interface UploadByteSource {
-    /** In-memory data (`File`/`Blob`/`Buffer`/`Uint8Array`/`ArrayBuffer`). */
-    data?: UploadData;
-    /** A filesystem path to stream from (Node.js only). */
-    path?: string;
-    /** A readable stream (Node.js only). Requires `contentLength`. */
-    stream?: NodeReadableLike;
-    /** Byte size — required for `stream` inputs, computed otherwise. */
-    contentLength?: number;
+/** A nested reference to the function route that handled a request. */
+interface NetworkRequestFunctionRef {
+    id: string;
+    name: string | null;
+    path: string;
+    region: string | null;
 }
-/**
- * Manage upload sessions and upload bytes to a signed upload URL using the
- * resumable upload protocol. Accessed via
- * `client.applications.storage.uploadSessions`.
- *
- * For most use cases, prefer the high-level `client.applications.storage.upload()`
- * which creates the session, computes the required checksum, uploads the bytes,
- * and returns the public URL.
- */
-declare class StorageUploadSessionsResource extends BaseResource {
-    private readonly transport;
-    constructor(httpClient: ConstructorParameters<typeof BaseResource>[0], transport?: UploadTransport);
-    /**
-     * List upload sessions for a bucket.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param query - Optional pagination parameters.
-     * @returns A paginated list of upload sessions.
-     */
-    list(applicationId: string, bucketId: string, query?: ListQuery): Promise<Paginated<StorageUploadSession>>;
-    /**
-     * Create an upload session. Returns the session metadata and a signed upload
-     * URL for sending file data. This is the low-level method — for most use
-     * cases prefer `client.applications.storage.upload()` which also computes the
-     * required SHA-256 checksum for you.
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param data - Object key, content length, SHA-256 checksum, and optional content type / extra checksums.
-     * @returns The session and resumable upload instructions (URL, method, headers).
-     */
-    create(applicationId: string, bucketId: string, data: CreateUploadSessionInput): Promise<CreateUploadSessionResponse>;
-    /**
-     * Get an upload session by ID. Use this to track server-side processing after
-     * an upload (poll until `state === 'completed'`).
-     *
-     * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param sessionId - The upload session ID (UUID).
-     * @returns The current session state.
-     */
-    get(applicationId: string, bucketId: string, sessionId: string): Promise<StorageUploadSession>;
-    /**
-     * Upload bytes directly to a pre-existing signed upload URL — for example, a
-     * URL returned by {@link create} or handed to your client by a backend. Skips
-     * session creation and checksum computation.
-     *
-     * @param url - A signed upload URL.
-     * @param source - The bytes to upload.
-     * @param options - Chunk size, retry config, progress, abort signal, resume,
-     *   and any required `headers` returned with the upload session.
-     * @throws {@link UploadError} if the upload fails after all retries.
-     */
-    uploadToUrl(url: string, source: UploadByteSource, options?: RunUploadOptions & {
-        headers?: Record<string, string>;
-    }): Promise<void>;
-    /**
-     * Resume an interrupted upload to a previously issued signed upload URL. The
-     * resumable protocol negotiates the current offset and continues from there.
-     *
-     * @param url - The signed upload URL from the original {@link create} call.
-     * @param source - The full bytes to upload (the same content as the original).
-     * @param options - Chunk size, retry config, progress, abort signal.
-     */
-    resumeFromUrl(url: string, source: UploadByteSource, options?: RunUploadOptions & {
-        headers?: Record<string, string>;
-    }): Promise<void>;
+/** A nested reference to the static asset that served a request. */
+interface NetworkRequestAssetRef {
+    id: string;
+    path: string;
+    objectKey: string;
 }
-
-/** Options controlling whether and how to wait for an upload to finalize server-side. */
-interface WaitForCompletionOptions {
-    /** Maximum time to wait in milliseconds. Default: 60000. */
-    timeoutMs?: number;
-    /** How often to poll the session state, in milliseconds. Default: 1000. */
-    pollIntervalMs?: number;
+/** A nested reference to the storage bucket involved in a request. */
+interface NetworkRequestBucketRef {
+    id: string;
+    name: string;
+    slug: string;
 }
-/** Input for the high-level {@link ApplicationStorageResource.upload | upload()} method. */
-interface UploadFileInput {
-    /** The application ID (UUID). */
-    applicationId: string;
-    /** The target bucket ID (UUID). */
-    bucketId: string;
-    /** The object key/path in the bucket (e.g. `"images/logo.png"`). */
+/** A nested reference to the storage object involved in a request. */
+interface NetworkRequestObjectRef {
+    id: string;
     key: string;
-    /** In-memory data (browser `File`/`Blob`, Node `Buffer`, `Uint8Array`, `ArrayBuffer`). */
-    data?: UploadData;
-    /** A filesystem path to upload from (Node.js only). Size, checksum, and content type are derived automatically. */
-    path?: string;
-    /** A readable stream to upload from (Node.js only). Requires `contentLength` and `checksumSha256`. */
-    stream?: NodeReadableLike;
-    /** MIME content type. Inferred from `key` when omitted. */
-    contentType?: string;
-    /** Byte size. Required for `stream`; computed otherwise. */
-    contentLength?: number;
-    /** Pre-computed SHA-256 (skips hashing). Required for `stream`. */
-    checksumSha256?: string;
-    /** Also send a SHA-1 checksum. */
-    checksumSha1?: string;
-    /** Also send an MD5 checksum (Node.js only unless provided). */
-    checksumMd5?: string;
-    /** Maximum chunk size in bytes (for very large files / streams). */
-    chunkSize?: number;
-    /** Retry backoff in milliseconds; `null`/`[]` disables retries. */
-    retryDelays?: number[] | null;
-    /** Progress callback invoked during the byte upload. */
-    onProgress?: (bytesSent: number, bytesTotal: number) => void;
-    /** Abort signal to cancel the upload. */
-    signal?: AbortSignal;
-    /** Persist a resumable fingerprint so the upload can be resumed later. */
-    resume?: boolean;
-    /** Custom storage backend for resumable fingerprints. */
-    urlStorage?: UploadUrlStorage;
-    /** Wait until the object is finalized server-side before resolving. Pass options to tune polling. */
-    waitForCompletion?: boolean | WaitForCompletionOptions;
+    contentType: string | null;
 }
-/** Result of a successful upload. */
-interface UploadFileResult {
-    /** The upload session. When `waitForCompletion` was set, `state` is `"completed"`. */
-    session: StorageUploadSession;
-    /** The public/CDN URL of the uploaded object. */
-    url: string;
-    /** The finalized storage object — present only when `waitForCompletion` was set. */
-    object?: StorageObject;
+/** The HTTP request details captured for a network request. */
+interface NetworkRequestDetails {
+    method: string;
+    hostname: string;
+    path: string;
+    query: string | null;
+    protocol: string | null;
+    country: string | null;
+    userAgent: string | null;
+    referer: string | null;
 }
-/** Options for {@link ApplicationStorageResource.uploadBatch | uploadBatch()}. */
-interface UploadBatchOptions {
-    /** Maximum number of concurrent uploads. Default: 4. */
-    concurrency?: number;
-    /** Called after each file settles, with the number completed and the total. */
-    onProgress?: (completed: number, total: number) => void;
+/** The HTTP response details captured for a network request. */
+interface NetworkResponseDetails {
+    status: number | null;
+    cacheStatus: 'hit' | 'miss' | 'bypass' | 'revalidated' | 'stale' | 'updating' | null;
+    cacheHit: boolean | null;
+    region: string | null;
+    edgeLocation: string | null;
 }
-/** The outcome of one file within a batch upload. Errors are isolated per file. */
-interface UploadBatchItemResult {
-    /** The input that produced this result. */
-    input: UploadFileInput;
-    /** The successful result, if the upload succeeded. */
-    result?: UploadFileResult;
-    /** The error, if this upload failed. */
-    error?: unknown;
+/** Byte and timing metrics for a network request. */
+interface NetworkRequestMetrics {
+    requestBodyBytes: number | null;
+    responseBodyBytes: number | null;
+    bytesSent: number | null;
+    durationMs: number | null;
+}
+/** A single observed request served through the Gigadrive Network edge (summary form). */
+interface NetworkRequestSummary {
+    id: string;
+    application: NetworkRequestApplicationRef;
+    deployment: NetworkRequestDeploymentRef | null;
+    deploymentFunction: NetworkRequestFunctionRef | null;
+    deploymentAsset: NetworkRequestAssetRef | null;
+    storageBucket: NetworkRequestBucketRef | null;
+    storageObject: NetworkRequestObjectRef | null;
+    request: NetworkRequestDetails;
+    response: NetworkResponseDetails;
+    metrics: NetworkRequestMetrics;
+    startedAt: string;
+    completedAt: string | null;
+}
+/** A full network request record, including sanitized request/response headers. */
+interface NetworkRequest extends NetworkRequestSummary {
+    /** Sanitized request headers captured for debugging. */
+    requestHeaders: Record<string, string>;
+    /** Sanitized response headers captured for debugging. */
+    responseHeaders: Record<string, string>;
+}
+/** Query filters for listing application requests. All fields are optional. */
+interface ListRequestsQuery {
+    /** Filter to requests served by one deployment. */
+    deploymentId?: string;
+    /** Filter to requests served by one function route. */
+    deploymentFunctionId?: string;
+    /** Filter to requests served by one static asset route. */
+    deploymentAssetId?: string;
+    /** Filter to storage delivery requests for one bucket. */
+    storageBucketId?: string;
+    /** Filter to storage delivery requests for one object. */
+    storageObjectId?: string;
+    /** Only include requests that started at or after this ISO 8601 timestamp. */
+    from?: string;
+    /** Only include requests that started before or at this ISO 8601 timestamp. */
+    to?: string;
+    /** Maximum number of records to return. */
+    limit?: number;
+    /** Opaque cursor from a previous response's `nextCursor`. */
+    cursor?: string;
+    /** Filter by HTTP method (e.g. `"GET"`). */
+    method?: string;
+    /** Filter by exact HTTP status code. */
+    status?: number;
+    /** Filter by status family (`2`, `3`, `4`, or `5`). */
+    statusFamily?: number;
+    /** Filter by request hostname. */
+    hostname?: string;
+    /** Filter to requests whose path starts with this prefix. */
+    pathPrefix?: string;
+    /** Filter by ISO 3166-1 alpha-2 country code. */
+    country?: string;
+    /** Filter by origin region. */
+    region?: string;
+    /** Filter by edge location. */
+    edgeLocation?: string;
+    /** Filter by CDN cache state. */
+    cacheStatus?: string;
+    /** Filter by whether the response was served from cache. */
+    cacheHit?: boolean;
 }
 /**
- * Namespace for all storage operations on an application: bucket management,
- * object listing/access, low-level upload sessions, and the high-level
- * {@link upload} / {@link uploadBatch} helpers.
- *
- * Accessed via `client.applications.storage`.
+ * Read observed traffic (request logs) for an application. Accessed via
+ * `client.applications.requests`.
  *
  * @example
  * ```ts
- * // High-level upload (Node.js, from a path — checksum/size/content-type inferred)
- * const { url } = await client.applications.storage.upload({
- *   applicationId: 'app-id',
- *   bucketId: 'bucket-id',
- *   key: 'photos/cat.jpg',
- *   path: './cat.jpg',
- * });
- *
- * // Browser upload from a file input, with progress and abort
- * const controller = new AbortController();
- * const { url } = await client.applications.storage.upload({
- *   applicationId: 'app-id',
- *   bucketId: 'bucket-id',
- *   key: `uploads/${file.name}`,
- *   data: file,
- *   onProgress: (sent, total) => console.log(`${Math.round((sent / total) * 100)}%`),
- *   signal: controller.signal,
+ * // Recent 5xx responses for a deployment
+ * const { items } = await client.applications.requests.list('app-id', {
+ *   deploymentId: 'dep-id',
+ *   statusFamily: 5,
+ *   limit: 100,
  * });
  * ```
  */
-declare class ApplicationStorageResource {
-    /** Create, list, get, and delete storage buckets. */
-    readonly buckets: StorageBucketsResource;
-    /** List, get, delete objects, and generate access URLs. */
-    readonly objects: StorageObjectsResource;
-    /** Low-level upload sessions and direct-to-URL byte uploads. */
-    readonly uploadSessions: StorageUploadSessionsResource;
-    private readonly transport;
-    constructor(httpClient: HttpClient, transport?: UploadTransport);
-    /**
-     * Upload a file to a storage bucket. Handles the full flow: computes the
-     * required SHA-256 checksum, creates an upload session, uploads the bytes with
-     * automatic retries (and optional progress/abort/resume), and returns the
-     * public URL.
-     *
-     * Accepts browser `File`/`Blob`, Node `Buffer`/`Uint8Array`/`ArrayBuffer`, a
-     * Node filesystem `path`, or a Node readable `stream` (with `contentLength`
-     * and `checksumSha256`). The content type is inferred from `key` when omitted.
-     *
-     * @param input - What and where to upload, plus optional transfer options.
-     * @returns The upload session and public object URL (and the finalized object when `waitForCompletion` is set).
-     * @throws {@link UploadError} if the byte upload fails.
-     * @throws {@link UploadSessionExpiredError} if the session expires mid-upload.
-     *
-     * @example
-     * ```ts
-     * const { session, url, object } = await client.applications.storage.upload({
-     *   applicationId, bucketId, key: 'reports/q1.pdf', path: './q1.pdf',
-     *   waitForCompletion: true,
-     * });
-     * console.log(object?.contentLength, 'bytes available at', url);
-     * ```
-     */
-    upload(input: UploadFileInput): Promise<UploadFileResult>;
+declare class ApplicationRequestsResource extends BaseResource {
     /**
-     * Upload many files concurrently. Each file is uploaded independently; a
-     * failure for one file does not abort the others — inspect each item's
-     * `error`/`result`.
-     *
-     * @param inputs - The files to upload.
-     * @param options - Concurrency limit and an aggregated progress callback.
-     * @returns One result per input, in the same order.
+     * List requests for an application, with rich filtering and cursor pagination.
      *
-     * @example
-     * ```ts
-     * const results = await client.applications.storage.uploadBatch(
-     *   files.map((f) => ({ applicationId, bucketId, key: `uploads/${f.name}`, data: f })),
-     *   { concurrency: 6, onProgress: (done, total) => console.log(`${done}/${total}`) },
-     * );
-     * const failed = results.filter((r) => r.error);
-     * ```
+     * @param applicationId - The application ID (UUID).
+     * @param query - Optional filters and pagination.
+     * @returns A page of request summaries.
      */
-    uploadBatch(inputs: UploadFileInput[], options?: UploadBatchOptions): Promise<UploadBatchItemResult[]>;
+    list(applicationId: string, query?: ListRequestsQuery): Promise<Paginated<NetworkRequestSummary>>;
     /**
-     * Poll an upload session until the object is finalized server-side.
+     * Get a single request by ID, including sanitized request/response headers.
      *
      * @param applicationId - The application ID (UUID).
-     * @param bucketId - The bucket ID (UUID).
-     * @param sessionId - The upload session ID (UUID).
-     * @param options - Timeout and polling interval.
-     * @returns The completed session.
-     * @throws {@link UploadError} if the session fails, expires, or the timeout elapses.
+     * @param requestId - The request record ID (UUID).
+     * @returns The full request record.
      */
-    waitForCompletion(applicationId: string, bucketId: string, sessionId: string, options?: WaitForCompletionOptions): Promise<StorageUploadSession>;
+    get(applicationId: string, requestId: string): Promise<NetworkRequest>;
 }
 
 /** A `*.gigadrive.app` hostname assigned to an application or deployment. */
@@ -2276,15 +2280,14 @@ declare class ApplicationsResource extends BaseResource {
      * @example
      * ```ts
      * // Upload a file
-     * const { url } = await client.applications.storage.upload({
-     *   applicationId: 'app-id',
-     *   bucketId: 'bucket-id',
+     * const { url } = await client.storage.upload({
+     *   bucket: 'assets',
      *   key: 'images/logo.png',
      *   data: fileData,
      * });
      *
      * // List objects in a bucket
-     * const { items } = await client.applications.storage.objects.list('app-id', 'bucket-id');
+     * const { items } = await client.storage.objects.list('assets');
      * ```
      */
     readonly storage: ApplicationStorageResource;
@@ -2297,7 +2300,7 @@ declare class ApplicationsResource extends BaseResource {
      * ```
      */
     readonly requests: ApplicationRequestsResource;
-    constructor(...args: ConstructorParameters<typeof BaseResource>);
+    constructor(httpClient: ConstructorParameters<typeof BaseResource>[0], defaultApplicationId?: string);
     /**
      * List applications the authenticated actor has access to.
      *
@@ -2753,6 +2756,14 @@ declare class StickySessionsResource extends BaseResource {
  * resolution chain.
  */
 interface GigadriveClientConfig {
+    /**
+     * Default application UUID for context-bound storage calls.
+     *
+     * Falls back to `GIGADRIVE_APPLICATION_ID`, which the platform injects into
+     * deployed workloads. Explicit application IDs supplied to compatibility
+     * overloads take precedence over this value.
+     */
+    applicationId?: string;
     /**
      * OAuth2 client ID (the API key ID from the Gigadrive dashboard).
      * Used for both client-credentials and refresh-token flows.
@@ -2889,6 +2900,15 @@ declare class GigadriveClient {
     readonly organizations: OrganizationsResource;
     /** Application management (list, environment variables, storage). */
     readonly applications: ApplicationsResource;
+    /**
+     * Context-bound file storage operations.
+     *
+     * Deployed workloads receive their application context through
+     * `GIGADRIVE_APPLICATION_ID`; management clients can set
+     * {@link GigadriveClientConfig.applicationId}. This is the same resource as
+     * {@link applications}.storage.
+     */
+    readonly storage: ApplicationStorageResource;
     /** Deployment lifecycle (create, upload, status, logs). */
     readonly deployments: DeploymentsResource;
     /** AI Gateway — OpenAI-compatible chat completions and model listing. */
@@ -2944,6 +2964,17 @@ declare class GigadriveError extends Error {
 declare class AuthenticationError extends GigadriveError {
     constructor(message: string);
 }
+/**
+ * Thrown when an SDK operation requires local configuration that could not be
+ * resolved before making an API request.
+ *
+ * Storage operations use this error when neither an explicit application ID,
+ * `GigadriveClientConfig.applicationId`, nor the workload-provided
+ * `GIGADRIVE_APPLICATION_ID` environment variable is available.
+ */
+declare class ConfigurationError extends GigadriveError {
+    constructor(message: string);
+}
 /**
  * Thrown when the Gigadrive API returns a non-2xx HTTP response.
  *
@@ -2977,7 +3008,7 @@ declare class ApiError extends GigadriveError {
  * @example
  * ```ts
  * try {
- *   await client.applications.storage.upload({ applicationId, bucketId, key, data });
+ *   await client.storage.upload({ bucket: 'assets', key, data });
  * } catch (err) {
  *   if (err instanceof UploadError) {
  *     console.error('Upload failed:', err.message, err.cause);
@@ -3037,4 +3068,4 @@ declare function paginate<T>(fetchPage: (cursor: string | undefined) => Promise<
  */
 declare function parseSSEStream<T = unknown>(response: Response): AsyncGenerator<T>;
 
-export { AiGatewayAudioResource, type AiGatewayBudget, type AiGatewayBudgetInput, AiGatewayBudgetsResource, AiGatewayPoliciesResource, type AiGatewayPolicy, type AiGatewayPolicyInput, type AiGatewayProviderAttempt, type AiGatewayRequestEvent, type AiGatewayRequestsQuery, AiGatewayResource, type AiGatewayUsageBreakdown, type AiGatewayUsageQuery, AiGatewayUsageResource, type AiGatewayUsageSummary, AiGatewayVideosResource, type AiModel, type AiModelCapabilities, type AiModelRoutingProvider, ApiError, type ApiKey, ApiKeysResource, type Application, ApplicationEnvVarsResource, type ApplicationHostnameList, ApplicationRequestsResource, ApplicationStorageResource, ApplicationsResource, AuthenticationError, type ChatCompletionChoice, type ChatCompletionChunk, type ChatCompletionContentPart, type ChatCompletionMessage, type ChatCompletionRequest, type ChatCompletionResponse, type ChatCompletionUsage, type CreateApiKeyInput, type CreateApiKeyResult, type CreateDeploymentInput, type CreateEnvVarInput, type CreateOrganizationInput, type CreateStickySessionUrlInput, type CreateStickySessionUrlResult, type CreateStorageBucketInput, type CreateUploadSessionInput, type CreateUploadSessionResponse, type Deployment, type DeploymentLog, type DeploymentLogPage, type DeploymentLogType, type DeploymentStatus, DeploymentsResource, type EnvVar, type GatewayRequestOptions, type GatewayResult, GigadriveClient, type GigadriveClientConfig, GigadriveError, type Hostname, type HostnameAvailability, type ImageCacheInspection, type ImageCachePurgeResult, ImageOptimizationResource, type ListApiKeysQuery, type ListApplicationsQuery, type ListDeploymentLogsQuery, type ListDeploymentsQuery, type ListQuery, type ListRequestsQuery, type ListStorageObjectsQuery, type ManagedImageUrlOptions, type NetworkRequest, type NetworkRequestApplicationRef, type NetworkRequestAssetRef, type NetworkRequestBucketRef, type NetworkRequestDeploymentRef, type NetworkRequestDetails, type NetworkRequestFunctionRef, type NetworkRequestMetrics, type NetworkRequestObjectRef, type NetworkRequestSummary, type NetworkResponseDetails, type NodeReadableLike, type Organization, OrganizationAiGatewayResource, OrganizationEnvVarsResource, type OrganizationMember, OrganizationMembersResource, type OrganizationMembershipRole, type OrganizationProductAccess, type OrganizationProductEntitlement, type OrganizationProductEntitlementCheck, type OrganizationProductSubscription, OrganizationProductsResource, OrganizationsResource, type Paginated, type PresignedUrlResult, type ProductAccessMode, type ProductAccessResolutionSource, type ProductDefaultAccessPolicy, type ProductDefinition, type ProductEntitlementStatus, type ProductPlan, type ProductSubscriptionStatus, type ProviderRouting, type PullEnvVarsQuery, type PullEnvVarsResult, type QueryValue, type ResolvedEnvVar, type ResponsesRequest, type ResponsesResponse, type RunUploadOptions, type SetProductionHostnameResult, type SpeechRequest, type StartUploadResult, StickySessionsResource, type StorageBucket, StorageBucketsResource, type StorageObject, type StorageObjectAccess, type StorageObjectList, StorageObjectsResource, type StorageUploadSession, StorageUploadSessionsResource, type TranscriptionRequest, type TranscriptionResponse, type UpdateEnvVarInput, type UploadBatchItemResult, type UploadBatchOptions, type UploadByteSource, type UploadData, UploadError, type UploadFileInput, type UploadFileResult, type UploadPart, UploadSessionExpiredError, type UploadUrlStorage, type VideoGenerationRequest, type VideoGenerationResponse, type VideoModelList, type WaitForCompletionOptions, createManagedImageUrl, paginate, parseSSEStream };
+export { AiGatewayAudioResource, type AiGatewayBudget, type AiGatewayBudgetInput, AiGatewayBudgetsResource, AiGatewayPoliciesResource, type AiGatewayPolicy, type AiGatewayPolicyInput, type AiGatewayProviderAttempt, type AiGatewayRequestEvent, type AiGatewayRequestsQuery, AiGatewayResource, type AiGatewayUsageBreakdown, type AiGatewayUsageQuery, AiGatewayUsageResource, type AiGatewayUsageSummary, AiGatewayVideosResource, type AiModel, type AiModelCapabilities, type AiModelRoutingProvider, ApiError, type ApiKey, ApiKeysResource, type Application, ApplicationEnvVarsResource, type ApplicationHostnameList, ApplicationRequestsResource, ApplicationStorageResource, ApplicationsResource, AuthenticationError, type ChatCompletionChoice, type ChatCompletionChunk, type ChatCompletionContentPart, type ChatCompletionMessage, type ChatCompletionRequest, type ChatCompletionResponse, type ChatCompletionUsage, ConfigurationError, type CreateApiKeyInput, type CreateApiKeyResult, type CreateDeploymentInput, type CreateEnvVarInput, type CreateOrganizationInput, type CreateStickySessionUrlInput, type CreateStickySessionUrlResult, type CreateStorageBucketInput, type CreateUploadSessionInput, type CreateUploadSessionResponse, type Deployment, type DeploymentLog, type DeploymentLogPage, type DeploymentLogType, type DeploymentStatus, DeploymentsResource, type EmptyStorageTrashResult, type EnvVar, type GatewayRequestOptions, type GatewayResult, GigadriveClient, type GigadriveClientConfig, GigadriveError, type Hostname, type HostnameAvailability, type ImageCacheInspection, type ImageCachePurgeResult, ImageOptimizationResource, type ListApiKeysQuery, type ListApplicationsQuery, type ListDeploymentLogsQuery, type ListDeploymentsQuery, type ListQuery, type ListRequestsQuery, type ListStorageBucketsQuery, type ListStorageObjectsQuery, type ListStorageTrashQuery, type ListStorageUploadSessionsQuery, type ManagedImageUrlOptions, type NetworkRequest, type NetworkRequestApplicationRef, type NetworkRequestAssetRef, type NetworkRequestBucketRef, type NetworkRequestDeploymentRef, type NetworkRequestDetails, type NetworkRequestFunctionRef, type NetworkRequestMetrics, type NetworkRequestObjectRef, type NetworkRequestSummary, type NetworkResponseDetails, type NodeReadableLike, type Organization, OrganizationAiGatewayResource, OrganizationEnvVarsResource, type OrganizationMember, OrganizationMembersResource, type OrganizationMembershipRole, type OrganizationProductAccess, type OrganizationProductEntitlement, type OrganizationProductEntitlementCheck, type OrganizationProductSubscription, OrganizationProductsResource, OrganizationsResource, type Paginated, type PresignedUrlResult, type ProductAccessMode, type ProductAccessResolutionSource, type ProductDefaultAccessPolicy, type ProductDefinition, type ProductEntitlementStatus, type ProductPlan, type ProductSubscriptionStatus, type ProviderRouting, type PullEnvVarsQuery, type PullEnvVarsResult, type QueryValue, type ResolvedEnvVar, type ResponsesRequest, type ResponsesResponse, type RunUploadOptions, type SetProductionHostnameResult, type SpeechRequest, type StartUploadResult, StickySessionsResource, type StorageBucket, type StorageBucketReference, StorageBucketsResource, type StorageEnvironmentOptions, type StorageObject, type StorageObjectAccess, type StorageObjectAccessOptions, type StorageObjectList, StorageObjectsResource, type StorageTrashList, StorageTrashResource, type StorageUploadSession, StorageUploadSessionsResource, type TranscriptionRequest, type TranscriptionResponse, type TrashedStorageObject, type UpdateEnvVarInput, type UploadBatchItemResult, type UploadBatchOptions, type UploadByteSource, type UploadData, UploadError, type UploadFileInput, type UploadFileResult, type UploadPart, UploadSessionExpiredError, type UploadUrlStorage, type VideoGenerationRequest, type VideoGenerationResponse, type VideoModelList, type WaitForCompletionOptions, createManagedImageUrl, paginate, parseSSEStream };