@larc-iu/plaid-client 0.2.0-alpha.1 → 0.2.0-alpha.12

package/index.d.ts

@@ -15,7 +15,7 @@ interface ServiceParam {
   /** Key the value is sent under in the request payload. */
   key: string;
   label: string;
-  type: 'string' | 'number' | 'boolean' | 'enum' | 'multiselect';
+  type: "string" | "number" | "boolean" | "enum" | "multiselect";
   description?: string;
   default?: any;
   required?: boolean;
@@ -25,6 +25,8 @@ interface ServiceParam {
   min?: number;
   max?: number;
   step?: number;
+  /** `number` only: render as a slider to drag rather than a box to type in. */
+  slider?: boolean;
   /** `string` only. */
   placeholder?: string;
   multiline?: boolean;
@@ -62,16 +64,49 @@ interface DiscoveredService {
 
 interface ServiceRegistration {
   stop(): void;
+  /** Still serving, including while retrying a channel through a server restart. */
   isRunning(): boolean;
+  /** Channel open right now, i.e. the server currently sees this service as online. */
+  isConnected(): boolean;
   serviceInfo: ServiceInfo & { extras: any };
 }
 
+/** Connection-state transitions reported by a service registration. */
+type ServiceStatusEvent = "registered" | "reconnected" | "disconnected";
+
 interface ResponseHelper {
-  progress(percent: number, message: string): void;
+  requestId: string;
+  requesterId: string | null;
+  /** True once the requester has asked this request to stop. */
+  readonly cancelled: boolean;
+  /**
+   * Report progress — and a cancellation CHECKPOINT: throws
+   * `ServiceCancelled` once a stop has been asked for, which is what makes a
+   * service that already reports progress cancellable for free.
+   */
+  progress(percent: number, message: string, extra?: Record<string, any>): void;
+  /** Stop here if the requester has asked the request to stop. */
+  raiseIfCancelled(): void;
+  /** Run `fn` as a stretch that must finish once begun, usually the writes. */
+  critical<T>(fn: () => T | Promise<T>): Promise<T>;
   complete(data: any): void;
+  /** End the request because it was asked to stop; result carries `stopped: true`. */
+  stopped(data?: any): void;
   error(error: string | Error): void;
 }
 
+/** Thrown inside a handler when the requester has asked it to stop. */
+export class ServiceCancelled extends Error {
+  constructor(message?: string);
+}
+
+/** The cancellation half of a responseHelper, on its own. */
+export function createCancelScope(isCancelled: () => boolean): {
+  readonly cancelled: boolean;
+  raiseIfCancelled(): void;
+  critical<T>(fn: () => T | Promise<T>): Promise<T>;
+};
+
 interface SSEConnection {
   close(): void;
   getStats(): any;
@@ -79,7 +114,12 @@ interface SSEConnection {
 }
 
 interface VocabLinksBundle {
-  create(vocabItem: string, tokens: any[], metadata?: any, auditMessage?: string): Promise<any>;
+  create(
+    vocabItem: string,
+    tokens: any[],
+    metadata?: any,
+    auditMessage?: string,
+  ): Promise<any>;
   bulkCreate(body: any[], auditMessage?: string): Promise<{ ids: string[] }>;
   bulkDelete(body: any[], auditMessage?: string): Promise<void>;
   setMetadata(id: string, body: any, auditMessage?: string): Promise<any>;
@@ -93,43 +133,118 @@ interface VocabLayersBundle {
   get(id: string, includeItems?: boolean, asOf?: string): Promise<any>;
   delete(id: string, auditMessage?: string): Promise<any>;
   update(id: string, name: string, auditMessage?: string): Promise<any>;
-  setConfig(id: string, namespace: string, configKey: string, configValue: any, auditMessage?: string): Promise<any>;
-  deleteConfig(id: string, namespace: string, configKey: string, auditMessage?: string): Promise<any>;
+  setConfig(
+    id: string,
+    namespace: string,
+    configKey: string,
+    configValue: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  deleteConfig(
+    id: string,
+    namespace: string,
+    configKey: string,
+    auditMessage?: string,
+  ): Promise<any>;
   list(asOf?: string): Promise<any[]>;
-  listPage(opts?: { limit?: number; cursor?: string; asOf?: string }): Promise<Page>;
+  listPage(opts?: {
+    limit?: number;
+    cursor?: string;
+    asOf?: string;
+  }): Promise<Page>;
   iterPages(opts?: { pageSize?: number; asOf?: string }): AsyncGenerator<any[]>;
   create(name: string, auditMessage?: string): Promise<any>;
-  addMaintainer(id: string, userId: string, auditMessage?: string): Promise<any>;
-  removeMaintainer(id: string, userId: string, auditMessage?: string): Promise<any>;
+  addMaintainer(
+    id: string,
+    userId: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  removeMaintainer(
+    id: string,
+    userId: string,
+    auditMessage?: string,
+  ): Promise<any>;
 }
 
 interface RelationsBundle {
-  setMetadata(relationId: string, body: any, auditMessage?: string): Promise<any>;
+  setMetadata(
+    relationId: string,
+    body: any,
+    auditMessage?: string,
+  ): Promise<any>;
   deleteMetadata(relationId: string, auditMessage?: string): Promise<any>;
-  patchMetadata(relationId: string, body: any, auditMessage?: string): Promise<any>;
-  setTarget(relationId: string, spanId: string, auditMessage?: string): Promise<any>;
+  patchMetadata(
+    relationId: string,
+    body: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  setTarget(
+    relationId: string,
+    spanId: string,
+    auditMessage?: string,
+  ): Promise<any>;
   get(relationId: string, asOf?: string): Promise<any>;
   delete(relationId: string, auditMessage?: string): Promise<any>;
   update(relationId: string, value: any, auditMessage?: string): Promise<any>;
-  setSource(relationId: string, spanId: string, auditMessage?: string): Promise<any>;
-  create(layerId: string, sourceId: string, targetId: string, value: any, metadata?: any, auditMessage?: string): Promise<any>;
+  setSource(
+    relationId: string,
+    spanId: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  create(
+    layerId: string,
+    sourceId: string,
+    targetId: string,
+    value: any,
+    metadata?: any,
+    auditMessage?: string,
+  ): Promise<any>;
   bulkCreate(body: any[], auditMessage?: string): Promise<{ ids: string[] }>;
   bulkDelete(body: any[], auditMessage?: string): Promise<void>;
 }
 
 interface SpanLayersBundle {
-  setConfig(spanLayerId: string, namespace: string, configKey: string, configValue: any, auditMessage?: string): Promise<any>;
-  deleteConfig(spanLayerId: string, namespace: string, configKey: string, auditMessage?: string): Promise<any>;
+  setConfig(
+    spanLayerId: string,
+    namespace: string,
+    configKey: string,
+    configValue: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  deleteConfig(
+    spanLayerId: string,
+    namespace: string,
+    configKey: string,
+    auditMessage?: string,
+  ): Promise<any>;
   get(spanLayerId: string, asOf?: string): Promise<any>;
   delete(spanLayerId: string, auditMessage?: string): Promise<any>;
-  update(spanLayerId: string, name: string, auditMessage?: string): Promise<any>;
-  create(tokenLayerId: string, name: string, auditMessage?: string): Promise<any>;
-  shift(spanLayerId: string, direction: string, auditMessage?: string): Promise<any>;
+  update(
+    spanLayerId: string,
+    name: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  create(
+    tokenLayerId: string,
+    name: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  shift(
+    spanLayerId: string,
+    direction: string,
+    auditMessage?: string,
+  ): Promise<any>;
 }
 
 interface SpansBundle {
   setTokens(spanId: string, tokens: any[], auditMessage?: string): Promise<any>;
-  create(spanLayerId: string, tokens: any[], value: any, metadata?: any, auditMessage?: string): Promise<any>;
+  create(
+    spanLayerId: string,
+    tokens: any[],
+    value: any,
+    metadata?: any,
+    auditMessage?: string,
+  ): Promise<any>;
   get(spanId: string, asOf?: string): Promise<any>;
   delete(spanId: string, auditMessage?: string): Promise<any>;
   update(spanId: string, value: any, auditMessage?: string): Promise<any>;
@@ -148,7 +263,13 @@ interface TextsBundle {
   setMetadata(textId: string, body: any, auditMessage?: string): Promise<any>;
   deleteMetadata(textId: string, auditMessage?: string): Promise<any>;
   patchMetadata(textId: string, body: any, auditMessage?: string): Promise<any>;
-  create(textLayerId: string, documentId: string, body: string, metadata?: any, auditMessage?: string): Promise<any>;
+  create(
+    textLayerId: string,
+    documentId: string,
+    body: string,
+    metadata?: any,
+    auditMessage?: string,
+  ): Promise<any>;
   get(textId: string, asOf?: string): Promise<any>;
   delete(textId: string, auditMessage?: string): Promise<any>;
   update(textId: string, body: any, auditMessage?: string): Promise<any>;
@@ -156,14 +277,36 @@ interface TextsBundle {
 
 interface UsersBundle {
   list(asOf?: string): Promise<any[]>;
-  listPage(opts?: { limit?: number; cursor?: string; asOf?: string }): Promise<Page>;
+  listPage(opts?: {
+    limit?: number;
+    cursor?: string;
+    asOf?: string;
+  }): Promise<Page>;
   iterPages(opts?: { pageSize?: number; asOf?: string }): AsyncGenerator<any[]>;
-  create(username: string, password: string, isAdmin: boolean, auditMessage?: string): Promise<any>;
-  audit(userId: string, startTime?: string, endTime?: string, asOf?: string): Promise<any[]>;
+  create(
+    email: string,
+    password: string,
+    isAdmin: boolean,
+    displayName?: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  audit(
+    userId: string,
+    startTime?: string,
+    endTime?: string,
+    asOf?: string,
+  ): Promise<any[]>;
+  auditPage(userId: string, opts?: AuditPageOptions): Promise<Page>;
   get(id: string, asOf?: string): Promise<any>;
   delete(id: string, auditMessage?: string): Promise<any>;
   activate(id: string, auditMessage?: string): Promise<any>;
-  update(id: string, password?: string, username?: string, isAdmin?: boolean, auditMessage?: string): Promise<any>;
+  update(
+    id: string,
+    password?: string,
+    displayName?: string,
+    isAdmin?: boolean,
+    auditMessage?: string,
+  ): Promise<any>;
   /** URL for a user's profile picture, usable as an <img> src. Null when avatarHash is explicitly null. */
   avatarUrl(id: string, avatarHash?: string | null): string | null;
   getAvatar(id: string): Promise<any>;
@@ -171,11 +314,116 @@ interface UsersBundle {
   deleteAvatar(id: string, auditMessage?: string): Promise<any>;
 }
 
+interface UserDataEntry {
+  key: string;
+  updatedAt: string;
+  value?: any;
+}
+
+/** Private per-user key/value storage (owner or admin only; not audited). */
+interface UserDataBundle {
+  list(
+    userId: string,
+    opts?: { prefix?: string; includeValues?: boolean },
+  ): Promise<UserDataEntry[]>;
+  get(userId: string, key: string): Promise<UserDataEntry & { value: any }>;
+  put(
+    userId: string,
+    key: string,
+    value: any,
+  ): Promise<{ key: string; updatedAt: string }>;
+  delete(userId: string, key: string): Promise<any>;
+}
+
+interface CommentFilters {
+  documentId?: string;
+  entityType?: CommentableType;
+  entityId?: string;
+}
+
+/** Entities that can carry a comment. */
+type CommentableType =
+  "document" | "text" | "token" | "span" | "relation" | "vocab-item";
+
+interface Comment {
+  id: string;
+  /** The owning project, or null for a comment on a vocabulary entry. */
+  projectId: string | null;
+  /** The owning document, or null for a comment on a vocabulary entry. */
+  documentId: string | null;
+  /** The owning vocab layer, set only for a comment on a vocabulary entry. */
+  vocabLayerId: string | null;
+  entityType: CommentableType;
+  entityId: string;
+  /**
+   * What the comment is about, in words, captured when it was posted. A
+   * comment outlives its anchor, and this is what is left to show once the
+   * anchor has been deleted.
+   */
+  anchorLabel: string | null;
+  authorId: string;
+  body: string;
+  createdAt: string;
+  updatedAt: string;
+  /** True once the body has been rewritten since it was posted. */
+  edited: boolean;
+}
+
+interface CommentsBundle {
+  create(
+    entityType: CommentableType,
+    entityId: string,
+    body: string,
+    opts?: { anchorLabel?: string },
+  ): Promise<Comment>;
+  get(id: string): Promise<Comment>;
+  update(id: string, body: string): Promise<Comment>;
+  delete(id: string): Promise<any>;
+  list(projectId: string, filters?: CommentFilters): Promise<Comment[]>;
+  listPage(
+    projectId: string,
+    opts?: CommentFilters & { limit?: number; cursor?: string },
+  ): Promise<Page<Comment>>;
+  iterPages(
+    projectId: string,
+    opts?: CommentFilters & { pageSize?: number },
+  ): AsyncGenerator<Comment[]>;
+  /** `{entityId: count}`; keys are raw entity ids, never key-transformed. */
+  counts(
+    projectId: string,
+    filters?: CommentFilters,
+  ): Promise<Record<string, number>>;
+  /** Comments on a vocabulary's entries, oldest first. */
+  listInVocab(
+    vocabId: string,
+    filters?: { entityId?: string },
+  ): Promise<Comment[]>;
+  listInVocabPage(
+    vocabId: string,
+    opts?: { entityId?: string; limit?: number; cursor?: string },
+  ): Promise<Page<Comment>>;
+  /** `{entryId: count}` over a vocabulary; keys are raw entry ids. */
+  countsInVocab(
+    vocabId: string,
+    filters?: { entityId?: string },
+  ): Promise<Record<string, number>>;
+}
+
 interface ApiTokensBundle {
   list(userId: string): Promise<any[]>;
-  listPage(userId: string, opts?: { limit?: number; cursor?: string }): Promise<Page>;
-  iterPages(userId: string, opts?: { pageSize?: number }): AsyncGenerator<any[]>;
-  create(userId: string, name: string, auditMessage?: string): Promise<{ id: string; name: string; token: string }>;
+  listPage(
+    userId: string,
+    opts?: { limit?: number; cursor?: string },
+  ): Promise<Page>;
+  iterPages(
+    userId: string,
+    opts?: { pageSize?: number },
+  ): AsyncGenerator<any[]>;
+  create(
+    userId: string,
+    name: string,
+    auditMessage?: string,
+  ): Promise<{ id: string; name: string; token: string }>;
   revoke(userId: string, tokenId: string, auditMessage?: string): Promise<any>;
 }
 
@@ -207,8 +455,8 @@ interface InvitePreview {
   grantAdmin: boolean;
   projectName?: string;
   projectRole?: string;
-  /** Present only for a password reset: whose account the link belongs to. */
-  username?: string;
+  /** Present only for a password reset: the email of the account it belongs to. */
+  email?: string;
 }
 
 interface CreateInviteOptions {
@@ -223,52 +471,327 @@ interface CreateInviteOptions {
   note?: string;
 }
 
+/** Server limits, as reported by /api/v1/info. An unset limit is absent. */
+interface ServerLimits {
+  mediaFileBytes?: number;
+  jsonBodyBytes?: number;
+  batchOperations?: number;
+  metadataDepth?: number;
+  metadataKeyCount?: number;
+  metadataStringLength?: number;
+  metadataTotalBytes?: number;
+  userDataValueBytes?: number;
+}
+
+interface ServerHealth {
+  ok: boolean;
+  version: string;
+  uptimeMs: number;
+  audit: { dbSizeMb?: number; auditRows?: number; error?: string };
+}
+
+interface DocumentLock {
+  documentId: string;
+  userId: string;
+  expiresAt: number;
+}
+
+interface RateLimitBucket {
+  ip: string;
+  userId?: string;
+  failures: number;
+  limit: number;
+  blocked: boolean;
+}
+
+interface RateLimitSnapshot {
+  windowMs: number;
+  logins: RateLimitBucket[];
+  ips: RateLimitBucket[];
+  invites: RateLimitBucket[];
+}
+
+interface BackupStatus {
+  enabled: boolean;
+  directory: string;
+  retention: number;
+  time: string;
+  backups: Array<{ name: string; bytes: number; modified: string }>;
+  ok?: boolean;
+}
+
+interface ServerReport {
+  version: string;
+  jvm: {
+    uptimeMs: number;
+    startedAt: string;
+    java: string;
+    heapUsed: number;
+    heapMax: number;
+  };
+  database: {
+    path: string | null;
+    bytes: number | null;
+    walBytes: number | null;
+    slowQueryThresholdMs?: number;
+    journalMode?: string;
+    maxPoolSize?: number;
+    tables: Record<string, number | null>;
+  };
+  media: {
+    directory: string;
+    files: number;
+    bytes: number;
+    orphans: number;
+    orphanBytes: number;
+  };
+  backup: BackupStatus;
+  settings: Record<string, any>;
+}
+
+/** Server-level facts. `info` is fetched at most once per client. */
+interface ServerBundle {
+  info(): Promise<{ limits: ServerLimits }>;
+  limits(): Promise<ServerLimits>;
+  health(): Promise<ServerHealth>;
+}
+
+/** Instance-wide operations. Every method requires a global admin. */
+interface AdminBundle {
+  server(): Promise<ServerReport>;
+  backup(): Promise<BackupStatus>;
+  locks(): Promise<{ entries: DocumentLock[] }>;
+  releaseLock(documentId: string): Promise<{ result: string }>;
+  rateLimits(): Promise<RateLimitSnapshot>;
+  clearRateLimits(opts?: {
+    ip?: string;
+    userId?: string;
+  }): Promise<{ result: string }>;
+  logs(opts?: {
+    lines?: number;
+  }): Promise<{ file: string | null; lines: string[]; error?: string }>;
+  userData(opts?: AdminUserDataOptions): Promise<AdminUserDataEntry[]>;
+  userDataPage(
+    opts?: AdminUserDataOptions & { limit?: number; cursor?: string },
+  ): Promise<Page<AdminUserDataEntry>>;
+}
+
+/** Narrowings for the cross-account private-data listing. */
+interface AdminUserDataOptions {
+  /** Only keys starting with this literal head. */
+  prefix?: string;
+  /** Only keys matching this GLOB (`*` any run, `?` one character). */
+  pattern?: string;
+  includeValues?: boolean;
+}
+
+type AdminUserDataEntry = UserDataEntry & { userId: string };
+
+/** Options for a single page of any audit log. */
+interface AuditPageOptions {
+  startTime?: string;
+  endTime?: string;
+  asOf?: string;
+  opTypes?: string[] | string;
+  /** "desc" pages newest-first; a cursor belongs to the direction that made it. */
+  order?: "asc" | "desc";
+  limit?: number;
+  cursor?: string;
+}
+
+/** One user's activity over a scope and window. */
+interface ActivityTallyRow {
+  user: { id: string; displayName?: string };
+  operations: number;
+  changes: number;
+  documents: number;
+  firstTs: string;
+  lastTs: string;
+  byDay?: Array<{ date: string; changes: number }>;
+}
+
+/** Instance-wide audit reads and the per-user aggregate. */
+interface AuditBundle {
+  /** Admin only. */
+  list(opts?: {
+    startTime?: string;
+    endTime?: string;
+    opTypes?: string[] | string;
+  }): Promise<any[]>;
+  /** Admin only. */
+  listPage(opts?: AuditPageOptions): Promise<Page>;
+  /** Admin only. */
+  iterPages(opts?: {
+    startTime?: string;
+    endTime?: string;
+    opTypes?: string[] | string;
+    pageSize?: number;
+  }): AsyncGenerator<any[]>;
+  /** With projectId, open to that project's maintainers; without one, admin only. */
+  tally(opts?: {
+    projectId?: string;
+    startTime?: string;
+    endTime?: string;
+    daily?: boolean;
+  }): Promise<ActivityTallyRow[]>;
+}
+
 interface InvitesBundle {
-  list(opts?: { projectId?: string }): Promise<Invite[]>;
-  listPage(opts?: { projectId?: string; limit?: number; cursor?: string }): Promise<Page>;
-  iterPages(opts?: { projectId?: string; pageSize?: number }): AsyncGenerator<Invite[]>;
+  list(opts?: { projectId?: string; all?: boolean }): Promise<Invite[]>;
+  listPage(opts?: {
+    projectId?: string;
+    all?: boolean;
+    limit?: number;
+    cursor?: string;
+  }): Promise<Page>;
+  iterPages(opts?: {
+    projectId?: string;
+    all?: boolean;
+    pageSize?: number;
+  }): AsyncGenerator<Invite[]>;
   /** The `code` is returned ONCE and is not recoverable afterward. */
-  create(opts?: CreateInviteOptions, auditMessage?: string): Promise<Invite & { code: string }>;
+  create(
+    opts?: CreateInviteOptions,
+    auditMessage?: string,
+  ): Promise<Invite & { code: string }>;
   revoke(id: string, auditMessage?: string): Promise<any>;
 }
 
 interface TokenLayersBundle {
-  shift(tokenLayerId: string, direction: string, auditMessage?: string): Promise<any>;
-  create(textLayerId: string, name: string, overlapMode?: string, parentTokenLayerId?: string, auditMessage?: string): Promise<any>;
-  setConfig(tokenLayerId: string, namespace: string, configKey: string, configValue: any, auditMessage?: string): Promise<any>;
-  deleteConfig(tokenLayerId: string, namespace: string, configKey: string, auditMessage?: string): Promise<any>;
+  shift(
+    tokenLayerId: string,
+    direction: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  create(
+    textLayerId: string,
+    name: string,
+    overlapMode?: string,
+    parentTokenLayerId?: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  setConfig(
+    tokenLayerId: string,
+    namespace: string,
+    configKey: string,
+    configValue: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  deleteConfig(
+    tokenLayerId: string,
+    namespace: string,
+    configKey: string,
+    auditMessage?: string,
+  ): Promise<any>;
   get(tokenLayerId: string, asOf?: string): Promise<any>;
   delete(tokenLayerId: string, auditMessage?: string): Promise<any>;
-  update(tokenLayerId: string, name: string, auditMessage?: string): Promise<any>;
+  update(
+    tokenLayerId: string,
+    name: string,
+    auditMessage?: string,
+  ): Promise<any>;
 }
 
 interface DocumentsBundle {
   checkLock(documentId: string, asOf?: string): Promise<any>;
   acquireLock(documentId: string, auditMessage?: string): Promise<any>;
   releaseLock(documentId: string, auditMessage?: string): Promise<any>;
-  getMedia(documentId: string, asOf?: string): Promise<ArrayBuffer>;
-  uploadMedia(documentId: string, file: File, auditMessage?: string): Promise<any>;
+  getMedia(documentId: string): Promise<ArrayBuffer>;
+  uploadMedia(
+    documentId: string,
+    file: File,
+    auditMessage?: string,
+    options?: {
+      /** Called with the bytes sent so far as the file goes up (`total` is null when unknown). */
+      onProgress?: (progress: { loaded: number; total: number | null }) => void;
+    },
+  ): Promise<any>;
   deleteMedia(documentId: string, auditMessage?: string): Promise<any>;
-  setMetadata(documentId: string, body: any, auditMessage?: string): Promise<any>;
+  setMetadata(
+    documentId: string,
+    body: any,
+    auditMessage?: string,
+  ): Promise<any>;
   deleteMetadata(documentId: string, auditMessage?: string): Promise<any>;
-  patchMetadata(documentId: string, body: any, auditMessage?: string): Promise<any>;
-  audit(documentId: string, startTime?: string, endTime?: string, asOf?: string): Promise<any[]>;
+  patchMetadata(
+    documentId: string,
+    body: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  audit(
+    documentId: string,
+    startTime?: string,
+    endTime?: string,
+    asOf?: string,
+  ): Promise<any[]>;
+  auditPage(documentId: string, opts?: AuditPageOptions): Promise<Page>;
   get(documentId: string, includeBody?: boolean, asOf?: string): Promise<any>;
   delete(documentId: string, auditMessage?: string): Promise<any>;
   update(documentId: string, name: string, auditMessage?: string): Promise<any>;
-  create(projectId: string, name: string, metadata?: any, auditMessage?: string): Promise<any>;
+  create(
+    projectId: string,
+    name: string,
+    metadata?: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  /** Copy a document and everything in it into a new document of the same project. */
+  copy(
+    documentId: string,
+    name: string,
+    options?: { includeMedia?: boolean },
+    auditMessage?: string,
+  ): Promise<{ id: string; mediaError?: string }>;
+  restore(
+    documentId: string,
+    asOf: string,
+    options?: { dryRun?: boolean },
+    auditMessage?: string,
+  ): Promise<any>;
 }
 
 interface MessagesBundle {
-  sendMessage(projectId: string, data: any, auditMessage?: string): Promise<any>;
-  listen(projectId: string, onEvent: (eventType: string, data: any) => void | boolean, path?: string): SSEConnection;
+  sendMessage(
+    projectId: string,
+    data: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  listen(
+    projectId: string,
+    onEvent: (eventType: string, data: any) => void | boolean,
+    path?: string,
+  ): SSEConnection;
   /** Discover the services seen on a project: online ones plus previously-seen offline ones (check `online`). */
   discoverServices(projectId: string): Promise<DiscoveredService[]>;
   /** Forget a previously-seen (offline) service. Maintainer-only; 409 if currently connected. */
   discardService(projectId: string, serviceId: string): Promise<void>;
-  serve(projectId: string, serviceInfo: ServiceInfo, onServiceRequest: (data: any, responseHelper: ResponseHelper) => void, extras?: any): ServiceRegistration;
-  /** Submit work to a service; streams progress to `onProgress`, resolves with the result. */
-  requestService(projectId: string, serviceId: string, data: any, timeout?: number, onProgress?: (progress: any) => void): Promise<any>;
+  /**
+   * Register as a service and handle work requests. The registration reopens
+   * its channel whenever it drops, so a server restart needs no service restart.
+   */
+  serve(
+    projectId: string,
+    serviceInfo: ServiceInfo,
+    onServiceRequest: (data: any, responseHelper: ResponseHelper) => void,
+    extras?: any,
+    onStatus?: (
+      event: ServiceStatusEvent,
+      projectId: string,
+      detail?: string,
+    ) => void,
+  ): ServiceRegistration;
+  /**
+   * Submit work to a service; streams progress to `onProgress`, resolves with
+   * the result. Aborting `signal` stops waiting and rejects with an AbortError;
+   * the service is not told and finishes its work regardless.
+   */
+  requestService(
+    projectId: string,
+    serviceId: string,
+    data: any,
+    timeout?: number,
+    onProgress?: (progress: any) => void,
+    signal?: AbortSignal,
+  ): Promise<any>;
 }
 
 interface ProjectsBundle {
@@ -276,32 +799,86 @@ interface ProjectsBundle {
   removeWriter(id: string, userId: string, auditMessage?: string): Promise<any>;
   addReader(id: string, userId: string, auditMessage?: string): Promise<any>;
   removeReader(id: string, userId: string, auditMessage?: string): Promise<any>;
-  setConfig(id: string, namespace: string, configKey: string, configValue: any, auditMessage?: string): Promise<any>;
-  deleteConfig(id: string, namespace: string, configKey: string, auditMessage?: string): Promise<any>;
-  addMaintainer(id: string, userId: string, auditMessage?: string): Promise<any>;
-  removeMaintainer(id: string, userId: string, auditMessage?: string): Promise<any>;
-  audit(projectId: string, startTime?: string, endTime?: string, asOf?: string): Promise<any[]>;
+  setConfig(
+    id: string,
+    namespace: string,
+    configKey: string,
+    configValue: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  deleteConfig(
+    id: string,
+    namespace: string,
+    configKey: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  addMaintainer(
+    id: string,
+    userId: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  removeMaintainer(
+    id: string,
+    userId: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  audit(
+    projectId: string,
+    startTime?: string,
+    endTime?: string,
+    asOf?: string,
+  ): Promise<any[]>;
+  auditPage(projectId: string, opts?: AuditPageOptions): Promise<Page>;
   linkVocab(id: string, vocabId: string, auditMessage?: string): Promise<any>;
   unlinkVocab(id: string, vocabId: string, auditMessage?: string): Promise<any>;
   get(id: string, asOf?: string): Promise<any>;
   listDocuments(id: string): Promise<any[]>;
-  listDocumentsPage(id: string, opts?: { limit?: number; cursor?: string }): Promise<Page>;
-  iterDocuments(id: string, opts?: { pageSize?: number }): AsyncGenerator<any[]>;
+  listDocumentsPage(
+    id: string,
+    opts?: { limit?: number; cursor?: string },
+  ): Promise<Page>;
+  iterDocuments(
+    id: string,
+    opts?: { pageSize?: number },
+  ): AsyncGenerator<any[]>;
   delete(id: string, auditMessage?: string): Promise<any>;
   update(id: string, name: string, auditMessage?: string): Promise<any>;
   list(asOf?: string): Promise<any[]>;
-  listPage(opts?: { limit?: number; cursor?: string; asOf?: string }): Promise<Page>;
+  listPage(opts?: {
+    limit?: number;
+    cursor?: string;
+    asOf?: string;
+  }): Promise<Page>;
   iterPages(opts?: { pageSize?: number; asOf?: string }): AsyncGenerator<any[]>;
   create(name: string, auditMessage?: string): Promise<any>;
 }
 
 interface TextLayersBundle {
-  setConfig(textLayerId: string, namespace: string, configKey: string, configValue: any, auditMessage?: string): Promise<any>;
-  deleteConfig(textLayerId: string, namespace: string, configKey: string, auditMessage?: string): Promise<any>;
+  setConfig(
+    textLayerId: string,
+    namespace: string,
+    configKey: string,
+    configValue: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  deleteConfig(
+    textLayerId: string,
+    namespace: string,
+    configKey: string,
+    auditMessage?: string,
+  ): Promise<any>;
   get(textLayerId: string, asOf?: string): Promise<any>;
   delete(textLayerId: string, auditMessage?: string): Promise<any>;
-  update(textLayerId: string, name: string, auditMessage?: string): Promise<any>;
-  shift(textLayerId: string, direction: string, auditMessage?: string): Promise<any>;
+  update(
+    textLayerId: string,
+    name: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  shift(
+    textLayerId: string,
+    direction: string,
+    auditMessage?: string,
+  ): Promise<any>;
   create(projectId: string, name: string, auditMessage?: string): Promise<any>;
 }
 
@@ -309,7 +886,12 @@ interface VocabItemsBundle {
   setMetadata(id: string, body: any, auditMessage?: string): Promise<any>;
   deleteMetadata(id: string, auditMessage?: string): Promise<any>;
   patchMetadata(id: string, body: any, auditMessage?: string): Promise<any>;
-  create(vocabLayerId: string, form: string, metadata?: any, auditMessage?: string): Promise<any>;
+  create(
+    vocabLayerId: string,
+    form: string,
+    metadata?: any,
+    auditMessage?: string,
+  ): Promise<any>;
   bulkCreate(body: any[], auditMessage?: string): Promise<{ ids: string[] }>;
   bulkDelete(body: any[], auditMessage?: string): Promise<void>;
   get(id: string, asOf?: string): Promise<any>;
@@ -318,33 +900,90 @@ interface VocabItemsBundle {
 }
 
 interface RelationLayersBundle {
-  shift(relationLayerId: string, direction: string, auditMessage?: string): Promise<any>;
-  create(spanLayerId: string, name: string, auditMessage?: string): Promise<any>;
-  setConfig(relationLayerId: string, namespace: string, configKey: string, configValue: any, auditMessage?: string): Promise<any>;
-  deleteConfig(relationLayerId: string, namespace: string, configKey: string, auditMessage?: string): Promise<any>;
+  shift(
+    relationLayerId: string,
+    direction: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  create(
+    spanLayerId: string,
+    name: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  setConfig(
+    relationLayerId: string,
+    namespace: string,
+    configKey: string,
+    configValue: any,
+    auditMessage?: string,
+  ): Promise<any>;
+  deleteConfig(
+    relationLayerId: string,
+    namespace: string,
+    configKey: string,
+    auditMessage?: string,
+  ): Promise<any>;
   get(relationLayerId: string, asOf?: string): Promise<any>;
   delete(relationLayerId: string, auditMessage?: string): Promise<any>;
-  update(relationLayerId: string, name: string, auditMessage?: string): Promise<any>;
+  update(
+    relationLayerId: string,
+    name: string,
+    auditMessage?: string,
+  ): Promise<any>;
 }
 
 interface TokensBundle {
-  create(tokenLayerId: string, text: string, begin: number, end: number, precedence?: number | null, metadata?: any, auditMessage?: string): Promise<any>;
+  create(
+    tokenLayerId: string,
+    text: string,
+    begin: number,
+    end: number,
+    precedence?: number | null,
+    metadata?: any,
+    auditMessage?: string,
+  ): Promise<any>;
   get(tokenId: string, asOf?: string): Promise<any>;
   delete(tokenId: string, auditMessage?: string): Promise<any>;
-  update(tokenId: string, begin?: number, end?: number, precedence?: number | null, auditMessage?: string): Promise<any>;
+  update(
+    tokenId: string,
+    begin?: number,
+    end?: number,
+    precedence?: number | null,
+    auditMessage?: string,
+  ): Promise<any>;
   bulkCreate(body: any[], auditMessage?: string): Promise<{ ids: string[] }>;
   bulkDelete(body: any[], auditMessage?: string): Promise<void>;
   split(tokenId: string, position: number, auditMessage?: string): Promise<any>;
-  merge(tokenId: string, otherTokenId: string, auditMessage?: string): Promise<any>;
-  shift(tokenId: string, begin?: number, end?: number, auditMessage?: string): Promise<any>;
+  merge(
+    tokenId: string,
+    otherTokenId: string,
+    auditMessage?: string,
+  ): Promise<any>;
+  shift(
+    tokenId: string,
+    begin?: number,
+    end?: number,
+    auditMessage?: string,
+  ): Promise<any>;
   setMetadata(tokenId: string, body: any, auditMessage?: string): Promise<any>;
   deleteMetadata(tokenId: string, auditMessage?: string): Promise<any>;
-  patchMetadata(tokenId: string, body: any, auditMessage?: string): Promise<any>;
+  patchMetadata(
+    tokenId: string,
+    body: any,
+    auditMessage?: string,
+  ): Promise<any>;
 }
 
 interface PlaidClientOptions {
   /** Per-request timeout in ms (default 30000; 0 or null disables it). */
   timeout?: number | null;
+  /**
+   * Timeout for batch submissions in ms (default 180000; 0 or null disables it).
+   * Batches get their own, longer budget: aborting one does NOT stop the
+   * server, which keeps running the transaction and holding the single SQLite
+   * write lock. Defaults to `timeout` when that is given and this is not.
+   */
+  batchTimeout?: number | null;
   /**
    * Fired once when a request returns HTTP 401 (missing/expired/invalid token).
    * Use it to discard the stored token and route back to login. 403 (forbidden)
@@ -360,19 +999,29 @@ export interface OperationGroupsBundle {
 
 export declare class PlaidClient {
   constructor(baseUrl: string, token: string, options?: PlaidClientOptions);
-  static login(baseUrl: string, userId: string, password: string, options?: PlaidClientOptions): Promise<PlaidClient>;
+  static login(
+    baseUrl: string,
+    userId: string,
+    password: string,
+    options?: PlaidClientOptions,
+  ): Promise<PlaidClient>;
   /** Build the link to hand someone for an invite code. */
   static inviteUrl(appUrl: string, code: string): string;
   /** Describe an invite code with no authentication (for a signup page). */
-  static lookupInvite(baseUrl: string, code: string, options?: PlaidClientOptions): Promise<InvitePreview>;
+  static lookupInvite(
+    baseUrl: string,
+    code: string,
+    options?: PlaidClientOptions,
+  ): Promise<InvitePreview>;
   /** Redeem an invite code with no authentication; resolves to a logged-in client. */
   static redeemInvite(
     baseUrl: string,
     code: string,
-    credentials: { username?: string; password: string },
+    credentials: { email?: string; password: string; displayName?: string },
     options?: PlaidClientOptions,
   ): Promise<{ client: PlaidClient; userId: string; kind: string }>;
   timeout: number | null;
+  batchTimeout: number | null;
   /** Fired once on HTTP 401 (see PlaidClientOptions.onAuthError). */
   onAuthError: ((error: Error) => void) | null;
 
@@ -394,7 +1043,10 @@ export declare class PlaidClient {
   operationGroup: { id: string; message: string | null } | null;
   beginOperation(message: string, opts?: { id?: string }): string;
   endOperation(message?: string): Promise<void>;
-  withOperation<T>(message: string, fn: (setMessage: (msg: string) => void) => Promise<T> | T): Promise<T>;
+  withOperation<T>(
+    message: string,
+    fn: (setMessage: (msg: string) => void) => Promise<T> | T,
+  ): Promise<T>;
   operationGroups: OperationGroupsBundle;
 
   // Query
@@ -409,7 +1061,12 @@ export declare class PlaidClient {
   texts: TextsBundle;
   users: UsersBundle;
   apiTokens: ApiTokensBundle;
+  userData: UserDataBundle;
   invites: InvitesBundle;
+  server: ServerBundle;
+  admin: AdminBundle;
+  audit: AuditBundle;
+  comments: CommentsBundle;
   tokenLayers: TokenLayersBundle;
   documents: DocumentsBundle;
   messages: MessagesBundle;
@@ -441,22 +1098,28 @@ export function cpIndexOf(s: string, sub: string, fromCp?: number): number;
 // Substrate layers are tagged with a role at `config.plaid.role` (a scalar) so
 // that different apps can share a project. See the manual, "Layer Interoperability".
 /** The reserved config namespace for cross-app conventions. */
-export const PLAID_NAMESPACE: 'plaid';
+export const PLAID_NAMESPACE: "plaid";
 /** The config key, under `plaid`, holding a layer's role. */
-export const ROLE_KEY: 'role';
+export const ROLE_KEY: "role";
+
+/** The server's cap on operations per batch request; a larger batch goes as consecutive requests. */
+export const MAX_BATCH_OPS: 1000;
 /** The fixed role inventory; only these values are interoperable across apps. */
 export const ROLES: {
-  readonly BASELINE: 'baseline';
-  readonly SENTENCE: 'sentence';
-  readonly WORD: 'word';
-  readonly SYNTACTIC_WORD: 'syntactic-word';
-  readonly MORPHEME: 'morpheme';
-  readonly TIME_ALIGNMENT: 'time-alignment';
+  readonly BASELINE: "baseline";
+  readonly SENTENCE: "sentence";
+  readonly WORD: "word";
+  readonly SYNTACTIC_WORD: "syntactic-word";
+  readonly MORPHEME: "morpheme";
+  readonly TIME_ALIGNMENT: "time-alignment";
 };
 /** The role recorded on a layer's `config`, or null if none. */
 export function readRole(config?: object): string | null;
 /** The first layer in `layers` carrying the given role, or null. */
-export function findByRole<T extends { config?: object }>(layers: T[] | undefined, role: string): T | null;
+export function findByRole<T extends { config?: object }>(
+  layers: T[] | undefined,
+  role: string,
+): T | null;
 
 // --- Service self-description helpers ----------------------------------------
 // Standardize how a service advertises (in `extras`) the tasks it serves, a
@@ -465,15 +1128,22 @@ export function findByRole<T extends { config?: object }>(layers: T[] | undefine
 // "Describing a service".
 /** The controlled task vocabulary — the fixed integration-point goals. */
 export const TASKS: {
-  readonly TOKENIZE: 'tokenize';
-  readonly PARSE: 'parse';
-  readonly TRANSCRIBE: 'transcribe';
-  readonly LINK_VOCAB: 'link-vocab';
+  readonly TOKENIZE: "tokenize";
+  readonly PARSE: "parse";
+  readonly TRANSCRIBE: "transcribe";
+  readonly LINK_VOCAB: "link-vocab";
+  readonly ANALYZE: "analyze";
+  readonly TRANSLATE: "translate";
+  readonly ASSIST: "assist";
+  readonly DETECT_SPEECH: "detect-speech";
 };
 /** Whether a service serves a task (declared `extras.tasks`, legacy id-prefix fallback). */
 export function servesTask(service: DiscoveredService, task: string): boolean;
 /** The discovered services that serve `task`. */
-export function filterServicesByTask(services: DiscoveredService[] | undefined, task: string): DiscoveredService[];
+export function filterServicesByTask(
+  services: DiscoveredService[] | undefined,
+  task: string,
+): DiscoveredService[];
 /** The parameter schema a service declares (ordered), or []. */
 export function getParamSchema(service: DiscoveredService): ServiceParam[];
 /** A service's human summary: `extras.summary`, else `description`, else ''. */
@@ -481,7 +1151,10 @@ export function getServiceSummary(service: DiscoveredService): string;
 /** Default form values keyed by param key. */
 export function buildDefaultValues(schema: ServiceParam[]): Record<string, any>;
 /** Coerce/validate raw form values against the schema. */
-export function coerceParamValues(schema: ServiceParam[], raw: Record<string, any>): { values: Record<string, any>; errors: Record<string, string> };
+export function coerceParamValues(
+  schema: ServiceParam[],
+  raw: Record<string, any>,
+): { values: Record<string, any>; errors: Record<string, string> };
 
 // --- Provenance ---------------------------------------------------------------
 // Cross-app convention for machine-provided vs human-labeled information,
@@ -491,32 +1164,50 @@ export function coerceParamValues(schema: ServiceParam[], raw: Record<string, an
 // replace unverified machine material but must never touch human/verified
 // material without an explicit overwrite opt-in; any human edit verifies.
 // See the manual, "Provenance".
-type ProvState = 'human' | 'machine' | 'verified';
+type ProvState = "human" | "machine" | "verified";
 export const PROV: {
-  readonly key: 'prov';
-  readonly sourceKey: 'provSource';
-  readonly confirmedKey: 'provConfirmed';
-  readonly probKey: 'provProb';
-  readonly detailKey: 'provDetail';
-  readonly INFERRED: 'inferred';
+  readonly key: "prov";
+  readonly sourceKey: "provSource";
+  readonly confirmedKey: "provConfirmed";
+  readonly probKey: "provProb";
+  readonly detailKey: "provDetail";
+  readonly INFERRED: "inferred";
 };
 export const PROV_STATES: {
-  readonly HUMAN: 'human';
-  readonly MACHINE: 'machine';
-  readonly VERIFIED: 'verified';
+  readonly HUMAN: "human";
+  readonly MACHINE: "machine";
+  readonly VERIFIED: "verified";
 };
 /** Optional prediction extras: prob = a probability in [0,1] for the chosen value
  * (flat + queryable; omit unless it honestly is one); detail = an open map of
  * producer extras (top-k alternatives, model version, raw scores; keep it small).
  * Both describe the ORIGINAL prediction — check provConfirmed before presenting
  * provProb as confidence in the current value. */
-interface ProvExtras { prob?: number; detail?: Record<string, any> }
+interface ProvExtras {
+  prob?: number;
+  detail?: Record<string, any>;
+}
 /** The metadata fragment a machine writer merges into everything it creates. */
-export function stampInferred(source: string, extras?: ProvExtras):
-  { prov: 'inferred'; provSource: string; provProb?: number; provDetail?: Record<string, any> };
+export function stampInferred(
+  source: string,
+  extras?: ProvExtras,
+): {
+  prov: "inferred";
+  provSource: string;
+  provProb?: number;
+  provDetail?: Record<string, any>;
+};
 /** stampInferred + provConfirmed — for machine material born verified (e.g. imports with upstream approval). */
-export function confirmedInferred(source: string, extras?: ProvExtras):
-  { prov: 'inferred'; provSource: string; provConfirmed: true; provProb?: number; provDetail?: Record<string, any> };
+export function confirmedInferred(
+  source: string,
+  extras?: ProvExtras,
+): {
+  prov: "inferred";
+  provSource: string;
+  provConfirmed: true;
+  provProb?: number;
+  provDetail?: Record<string, any>;
+};
 /** Classify an entity's metadata into one of the three provenance states. */
 export function provState(metadata: object | null | undefined): ProvState;
 /** The verifying fragment, { provConfirmed: true }: PATCH it over existing metadata. */
@@ -526,6 +1217,8 @@ export function isMachine(metadata: object | null | undefined): boolean;
 /** Whether a machine writer must leave this entity alone (human or verified). !isMachine. */
 export function isProtected(metadata: object | null | undefined): boolean;
 /** The fragment a HUMAN edit should merge in: PROV_CONFIRMED iff machine-unverified, else null. */
-export function verifyOnEdit(metadata: object | null | undefined): { readonly provConfirmed: true } | null;
+export function verifyOnEdit(
+  metadata: object | null | undefined,
+): { readonly provConfirmed: true } | null;
 /** Canonical provSource for a service: 'service:<serviceId>'. */
 export function serviceSource(serviceId: string): string;