@madewithremy/admin 0.1.52 → 0.1.54

package/CHANGELOG.md

@@ -4,6 +4,28 @@ What changed in `@madewithremy/admin`, newest first, each version under its own
 
 Versions before 0.1.44 aren't recorded here.
 
+## 0.1.54
+
+### New
+
+- Inside an app's own method, `createAdminClient()` with no key runs as the method's own run, on its own app: no workspace key in the app's secrets. The method declares what it may do with `"adminPermissions"` on its `mindstudio.json` entry (`analytics.view`, `usage.view`, `voice.manage` and the rest, listed on `createAdminClient` and at the end of `remy-admin --help`). A call it doesn't declare fails with `admin_permission_required:<name>` (403), `users.manage` from a dev or preview run with `admin_permission_live_only:users.manage`, and another app with `app_credential_wrong_app`. `@mindstudio-ai/agent` is an optional peer, the app's own copy, which the client reads the run from.
+- `remy-admin usage summary [--start] [--end] [--by method|model|step]` (`admin.usage.summary`): what the app costs to run over a window, in dollars, builds left out.
+
+### Changed behavior
+
+- A client resolves its credential on each call: a key passed in, then the running method's own run, then `MINDSTUDIO_API_KEY`. Bound operations all return promises, and `client.context` is null when neither the options nor the environment name a key. Code that read `client.context` should allow for null.
+- An app that bought numbers from a method with a workspace key kept as a secret can drop the key: declare `"adminPermissions": ["voice.manage"]` on the method and call `createAdminClient()` with no options.
+
+## 0.1.53
+
+### Changed behavior
+
+- `remy-admin voice numbers buy` (`admin.voice.numbersBuy`) buys a number for an app that already has one: an app can hold several, one per tenant say, and app code can buy, list and release them through `createAdminClient`. The limit is the workspace's, 10 numbers across its apps unless support raised it, and a buy past it is refused with `phone_number_limit_reached` (422). `number_already_assigned` is gone, so code that branched on it should branch on `phone_number_limit_reached` instead.
+
+### Fixed
+
+- The voice ops' docs give `number_unavailable`, `telnyx_not_configured`, `order_in_progress` and `number_not_active` their real status, 412.
+
 ## 0.1.52
 
 ### New

package/README.md

@@ -58,6 +58,27 @@ try {
 }
 ```
 
+### Inside an app's own method
+
+A Remy app's method can manage its own app with no key. Declare what it may do as `adminPermissions` on the method's entry in `mindstudio.json` (the list is on `createAdminClient`), then create the client with no options:
+
+```json
+{ "id": "admin-dashboard", "path": "dist/methods/src/adminDashboard.ts", "export": "adminDashboard", "adminPermissions": ["analytics.view", "usage.view"] }
+```
+
+```ts
+import { createAdminClient } from '@madewithremy/admin';
+const admin = createAdminClient();
+
+export async function adminDashboard() {
+  const live = await admin.analytics.live();
+  const spend = await admin.usage.summary({ startTime, endTime, groupBy: 'method' });
+  return { live, spend };
+}
+```
+
+Each call runs as the method's own run (its hook token, from `@mindstudio-ai/agent`'s request context), on the method's own app, so a client made at module scope follows every execution. A call the method doesn't declare an admin permission for fails with `admin_permission_required:<name>`; another app is `app_credential_wrong_app`, and needs a key. A key passed in always wins, and outside a method the client falls back to the environment, as above.
+
 Every response is fully typed (the shapes are hand-transcribed from the platform API). Failures throw `AdminApiError` (method/path/status/body) or `AdminTimeoutError`. Long-running composites take an `onProgress` callback (`releases.waitForCommit`, `dataSources.addDocument` / `waitForIngest`, `files.put`). The SSE/NDJSON streaming paths (`methods invoke --stream`, `jewels export --file`) are CLI-only.
 
 ## Development

package/dist/index.d.ts

@@ -5873,7 +5873,7 @@ declare function ls$1(ctx: AdminContext, params: FilesLsParams): Promise<FilesLs
  * @example
  * const { stores, totalObjects } = await admin.files.summary();
  */
-declare function summary(ctx: AdminContext): Promise<FilesListResult>;
+declare function summary$1(ctx: AdminContext): Promise<FilesListResult>;
 /**
  * Delete one object from a store.
  *
@@ -5893,9 +5893,8 @@ declare const files_put: typeof put;
 declare const files_remove: typeof remove;
 declare const files_sign: typeof sign;
 declare const files_stat: typeof stat;
-declare const files_summary: typeof summary;
 declare namespace files {
-  export { files_fetchBytes as fetchBytes, ls$1 as ls, files_put as put, files_remove as remove, files_sign as sign, files_stat as stat, files_summary as summary };
+  export { files_fetchBytes as fetchBytes, ls$1 as ls, files_put as put, files_remove as remove, files_sign as sign, files_stat as stat, summary$1 as summary };
   export type { files_FileAccess as FileAccess, files_FileRef as FileRef, files_FilesLsParams as FilesLsParams, files_FilesPutParams as FilesPutParams };
 }
 
@@ -8530,6 +8529,82 @@ declare namespace settings {
   };
 }
 
+/**
+ * Response types for an app's runtime cost.
+ *
+ * Transcribed from the api (apps/api/src/):
+ *   roles/http/routes/Apps/manage/usage.ts — the route and its shape
+ */
+/** How the spend is broken down. */
+type UsageGroupBy = 'method' | 'model' | 'step';
+/** One row of the breakdown. */
+interface UsageGroup {
+    /** The method's id, the model's id, or the step type. */
+    key: string;
+    /** What it cost over the window, in dollars. */
+    costDollars: number;
+    requests: number;
+    /** Failed requests; absent for a model row. */
+    errors?: number;
+    /** For a model row, its type (`text`, `image`, …). */
+    modelType?: string;
+}
+interface UsageSummaryResult {
+    groupBy: UsageGroupBy;
+    startTime: string;
+    endTime: string;
+    /** The window's total, in dollars. */
+    totalCostDollars: number;
+    /** Most expensive first. */
+    groups: UsageGroup[];
+}
+
+/**
+ * Usage operations: what the app costs to run.
+ *
+ * Ops are pure: (ctx, params) → typed result, throwing AdminApiError /
+ * AdminTimeoutError. No printing, no process coupling — the CLI skin in
+ * commands/usage.ts and the importable client both call these.
+ */
+
+interface UsageSummaryParams {
+    /** Window start, ISO 8601. */
+    startTime: string;
+    /** Window end, ISO 8601, after `startTime`. */
+    endTime: string;
+    /**
+     * The breakdown (default `method`): `method` is the spend each method
+     * drove, `model` the models' share, `step` the whole spend by action,
+     * models and everything else.
+     */
+    groupBy?: UsageGroupBy;
+}
+/**
+ * The app's runtime spend over a window, broken down one way, in dollars.
+ * Builds (Remy's own work on the app) aren't counted.
+ *
+ * In a method, needs the `usage.view` admin permission.
+ *
+ * @throws AdminApiError `invalid_window` (400) — a date that doesn't parse, or
+ *   an end not after the start; `invalid_group_by` (400);
+ *   `admin_permission_required:usage.view` (403) — a method that doesn't
+ *   declare it.
+ * @example
+ * const { totalCostDollars, groups } = await admin.usage.summary({
+ *   startTime: '2026-10-01T00:00:00Z',
+ *   endTime: '2026-11-01T00:00:00Z',
+ *   groupBy: 'method',
+ * });
+ */
+declare function summary(ctx: AdminContext, params: UsageSummaryParams): Promise<UsageSummaryResult>;
+
+type usage_UsageSummaryParams = UsageSummaryParams;
+declare const usage_summary: typeof summary;
+declare namespace usage {
+  export { usage_summary as summary };
+  export type { usage_UsageSummaryParams as UsageSummaryParams };
+}
+
 /**
  * Response types for the v2 app users endpoints.
  *
@@ -8888,7 +8963,7 @@ interface NumbersSearchParams {
  *
  * @throws AdminApiError `missing_search_filter` (400) — neither areaCode nor
  *   locality provided; `invalid_area_code` (400) — area code is not 3 digits;
- *   `telnyx_not_configured` (422) — phone numbers are not available on this
+ *   `telnyx_not_configured` (412) — phone numbers are not available on this
  *   platform host.
  * @example
  * const { results } = await admin.voice.numbersSearch({ areaCode: '310', limit: 5 });
@@ -8906,17 +8981,23 @@ interface NumbersBuyParams {
 }
 /**
  * Buy and attach a dedicated phone number to the app ($1/month billed to the
- * workspace starting immediately — always confirm with the user before calling).
+ * workspace starting immediately — an agent acting for the user always
+ * confirms with them first).
  *
- * The number is both the outbound caller-ID for `voice.call()` and the app's
- * inbound line. A `pending` status usually activates within seconds; poll
- * `numbersList` to confirm. One number per app in v1 — release before switching.
+ * The number is an inbound line to the app's voice agent and a caller ID for
+ * `voice.call()`. An app can hold several, one per tenant say, up to its
+ * workspace's limit (10 unless support raised it), and the app's own methods
+ * can buy and release them with this client by declaring the `voice.manage`
+ * admin permission. A
+ * `pending` status usually activates within seconds; poll `numbersList` to
+ * confirm.
  *
  * @throws AdminApiError `invalid_phone_number` (400) — not a valid +1 E.164
- *   US number; `number_already_assigned` (422) — this app already has a live
- *   number; `number_unavailable` (422) — the number is no longer available;
- *   `insufficient_credits/*` (402) — the workspace can't cover it;
- *   `telnyx_not_configured` (422) — phone numbers unavailable on this host.
+ *   US number; `phone_number_limit_reached` (422) — the workspace holds as
+ *   many numbers as it may; `number_unavailable` (412) — the number is no
+ *   longer available; `insufficient_credits/*` (402) — the workspace can't
+ *   cover it; `telnyx_not_configured` (412) — phone numbers unavailable on
+ *   this host.
  * @example
  * const { number } = await admin.voice.numbersBuy({
  *   phoneNumber: '+13105551234',
@@ -8930,13 +9011,14 @@ declare function numbersBuy(ctx: AdminContext, params: NumbersBuyParams): Promis
  * Release a dedicated phone number from the app (permanent).
  *
  * The monthly rental stops immediately (no refund for the current month),
- * the carrier quarantines the number for ~15 days, and both inbound calls
- * and outbound `voice.call()` stop working until a new number is attached.
+ * the carrier quarantines the number for ~15 days, and the number stops
+ * ringing the app and can't be a `voice.call()` caller ID. The app's other
+ * numbers are unaffected.
  *
  * @param e164 The phone number in E.164 or bare 10-digit US format.
  * @throws Error `No phone number "${e164}" on this app` when not found;
  *   AdminApiError `number_not_found` (404) if the resolved id has gone stale;
- *   `order_in_progress` (422) — the purchase is still settling, try again in
+ *   `order_in_progress` (412) — the purchase is still settling, try again in
  *   a minute.
  * @example
  * await admin.voice.numbersRelease('+13105551234');
@@ -8953,7 +9035,7 @@ declare function numbersRelease(ctx: AdminContext, e164: string): Promise<VoiceN
  * @param displayName 1–15 character CNAM string, or `""` to remove the listing.
  * @throws Error `No phone number "${e164}" on this app` when not found;
  *   AdminApiError `number_not_found` (404) if the resolved id has gone stale;
- *   `number_not_active` (422) — the number must be active before setting a
+ *   `number_not_active` (412) — the number must be active before setting a
  *   display name; `invalid_display_name` (400) — value is not 1–15 letters,
  *   numbers, or spaces.
  * @example
@@ -9038,30 +9120,46 @@ declare namespace voice {
 }
 
 interface AdminClientOptions {
-    /** Org-scoped `sk_` API key. Falls back to MINDSTUDIO_API_KEY. */
+    /**
+     * Org-scoped `sk_` API key. Inside an app's method, leave it out: the
+     * method's own run is the credential, holding the `adminPermissions` its
+     * `mindstudio.json` entry declares. Elsewhere it falls back to
+     * MINDSTUDIO_API_KEY.
+     */
     apiKey?: string;
     /**
-     * The app to manage. Falls back to the workspace's mindstudio.json —
-     * pass explicitly anywhere that file doesn't exist.
+     * The app to manage. Inside a method, the method's own app. Elsewhere it
+     * falls back to the workspace's mindstudio.json — pass explicitly anywhere
+     * that file doesn't exist.
      */
     appId?: string;
-    /** API origin. Falls back to MINDSTUDIO_BASE_URL, then the production default. */
+    /**
+     * API origin. Inside a method, the api the run calls back on. Elsewhere it
+     * falls back to MINDSTUDIO_BASE_URL, then the production default.
+     */
     baseUrl?: string;
 }
-/** An ops module with the AdminContext pre-applied to every function. */
+/** The context one call runs with. */
+type ContextSource = () => Promise<AdminContext>;
+/** An ops module with the AdminContext applied to every function. */
 type BoundOps<T> = {
-    [K in keyof T as T[K] extends (ctx: AdminContext, ...args: never[]) => unknown ? K : never]: T[K] extends (ctx: AdminContext, ...args: infer A) => infer R ? (...args: A) => R : never;
+    [K in keyof T as T[K] extends (ctx: AdminContext, ...args: never[]) => unknown ? K : never]: T[K] extends (ctx: AdminContext, ...args: infer A) => infer R ? (...args: A) => Promise<Awaited<R>> : never;
 };
-declare function buildClient(ctx: AdminContext): {
-    /** The resolved context this client is bound to. */
-    context: Readonly<AdminContext>;
+declare function buildClient(source: ContextSource, context: AdminContext | null): {
+    /**
+     * The context the client uses outside a running method: its options, or
+     * the environment. Null when neither names a key, as in a method, where
+     * each call takes the run's own.
+     */
+    context: Readonly<AdminContext> | null;
     /**
      * A sibling client for another app, sharing credentials.
      *
      * The app we came from becomes the origin, so a write through the returned
      * client records which app acted — the same rule the CLI's `--app` follows.
      * Chaining `forApp` twice keeps the FIRST app as the origin, since that is
-     * the one whose workspace this code is running in.
+     * the one whose workspace this code is running in. A method's own
+     * credential acts on its own app only, so from a method this needs a key.
      */
     forApp(appId: string): /*elided*/ any;
     agent: BoundOps<typeof agent>;
@@ -9110,6 +9208,7 @@ declare function buildClient(ctx: AdminContext): {
     requests: BoundOps<typeof requests>;
     secrets: BoundOps<typeof secrets>;
     settings: BoundOps<typeof settings>;
+    usage: BoundOps<typeof usage>;
     users: BoundOps<typeof users>;
     voice: BoundOps<typeof voice>;
 };
@@ -9117,10 +9216,53 @@ type AdminClient = ReturnType<typeof buildClient>;
 /**
  * Create a client bound to one app.
  *
+ * Inside an app's method, with no options, it acts on the method's own app as
+ * the method's own run: no key in the app's secrets. Each operation needs the
+ * admin permission the method declares in `mindstudio.json`
+ * (`"adminPermissions": ["analytics.view"]`), and an undeclared one fails with
+ * `admin_permission_required:<name>`.
+ *
+ * The admin permissions, by the client namespaces they open (`.manage`
+ * includes its `.view`):
+ *
+ * | Admin permission | Opens |
+ * |---|---|
+ * | `analytics.view` | `analytics` |
+ * | `usage.view` | `usage` |
+ * | `requests.view` | `requests`, `crashes` |
+ * | `agent.view` / `tasks.view` | `agent` / `tasks` |
+ * | `voice.view` / `voice.manage` | `voice` reads: call log, transcripts, settings, numbers list / buying, releasing and naming numbers, settings writes |
+ * | `users.view` / `users.manage` | `users` reads / roles and app-user API keys, live runs only (`admin_permission_live_only:users.manage` from dev or a preview) |
+ * | `settings.manage` | `settings` |
+ * | `email.view` / `email.manage` | `email` reads: log, batches, status, inbox, domains list / suppressions and the sending and receiving domains |
+ * | `domains.manage` | `domains`' custom domains and subdomain (not buying domains, which is the workspace's) |
+ * | `issues.view` / `issues.manage` | `issues` on this app, reads / writes as the app |
+ * | `datasources.manage` | `dataSources` and its jobs, connectors, evals, mappers and readers |
+ * | `cron.view` / `cron.manage` | `cron` overview / run now |
+ * | `releases.view` | `releases`, `diagnostics`' release reads |
+ *
+ * The rules:
+ * - Only the method's own app: `forApp()` and another `appId` get
+ *   `app_credential_wrong_app`. Another app or the workspace needs a key.
+ * - Not in a jewel's shadow run or a data source's mapper or reader run
+ *   (`admin_permission_unavailable`).
+ * - Publishing the declaration is the consent, and any visitor who can call
+ *   the method can make it use what it holds, so gate the method accordingly.
+ * - Never an admin permission: secrets (a method has its own in
+ *   `process.env`) and builder operations (deploys, data lifts, previews,
+ *   infra, jewel training). What `@mindstudio-ai/agent` already does needs
+ *   none.
+ *
  * ```ts
  * import { createAdminClient } from '@madewithremy/admin';
- * const admin = createAdminClient({ apiKey: 'sk_…', appId: 'app_…' });
- * const { releases } = await admin.releases.list({ limit: 5 });
+ *
+ * // In a method declaring "adminPermissions": ["analytics.view"]
+ * const admin = createAdminClient();
+ * const live = await admin.analytics.live();
+ *
+ * // Anywhere else, with a workspace API key
+ * const other = createAdminClient({ apiKey: 'sk_…', appId: 'app_…' });
+ * const { releases } = await other.releases.list({ limit: 5 });
  * ```
  */
 declare function createAdminClient(options?: AdminClientOptions): AdminClient;
@@ -9157,4 +9299,4 @@ declare class AdminTimeoutError extends Error {
 declare const admin: AdminClient;
 
 export { AdminApiError, AdminTimeoutError, admin, createAdminClient, admin as default };
-export type { AdminClient, AdminClientOptions, AdminContext, AgentThreadDetail, AgentThreadListItem, AgentThreadsGetResult, AgentThreadsListResult, AgentToolCall, AgentTranscriptMessage, AgentTurnError, AnalyticsAiHostRow, AnalyticsAiSourcesResult, AnalyticsAiVendorRow, AnalyticsBatchResult, AnalyticsCrawlersOverviewResult, AnalyticsCrawlersRecentResult, AnalyticsCrawlersRecentRow, AnalyticsCrawlersResult, AnalyticsCrawlersTimeseriesBucket, AnalyticsCrawlersTimeseriesResult, AnalyticsLiveResult, AnalyticsMapPoint, AnalyticsMapResult, AnalyticsMetric, AnalyticsQueryResult, AnalyticsQueryResultRow, AnalyticsSourceRow, AnalyticsSourcesResult, AppCronJobStatus, AppCronJobStatusReason, AppCronRunState, AppEmailSuppression, AppSecretRow, AppsListPage, AppsListResult, BoughtDomain, CrashGroup, CrashOccurrenceRow, CrashesGetResult, CrashesListResult, CrashesOccurrencesResult, CrashesStatsBucket, CrashesStatsResult, CronJobDecorated, CronOverviewResult, CronRunResult, CronRunSummary, DashboardLiveRelease, DashboardReleaseMethod, DashboardResult, DataLiftFromDevResult, DataLiftFromLiveResult, DataSourceConnector, DataSourceConnectorCredentials, DataSourceConnectorDeletions, DataSourceConnectorGetResult, DataSourceConnectorPolicy, DataSourceConnectorResult, DataSourceInspectReport, DataSourceInspectResult, DataSourceJob, DataSourceJobGetResult, DataSourceJobManifestTokenResult, DataSourceJobPlan, DataSourceJobResult, DataSourceJobSource, DataSourceJobState, DataSourceJobsListResult, DataSourceMapDeployResult, DataSourceMapTestDocument, DataSourceMapTestOutcome, DataSourceMapTestResult, DataSourceMapper, DataSourceObjectSelection, DataSourceQuarantineResult, DataSourceQuarantinedObject, DataSourceReader, DataSourceReaderDeliveries, DataSourceReaderRetryResult, DataSourceReaderStatusResult, DataSourceReaderTestDocument, DataSourceReaderTestResult, DataSourceRemapResult, DataSourceRereadResult, DataSourceSyncResult, DataSourcesBuildProgress, DataSourcesChunkingConfig, DataSourcesChunkingStrategy, DataSourcesConfigResult, DataSourcesConfigUpdateResult, DataSourcesCountResult, DataSourcesCreateResult, DataSourcesDeleteResult, DataSourcesDictionaryPushResult, DataSourcesDictionaryReport, DataSourcesDictionaryStatus, DataSourcesDocument, DataSourcesDocumentConfirmResult, DataSourcesDocumentDeleteManyResult, DataSourcesDocumentDeleteResult, DataSourcesDocumentSelector, DataSourcesDocumentStatus, DataSourcesDocumentsResult, DataSourcesDropResult, DataSourcesEntitiesResult, DataSourcesHydrateResult, DataSourcesHydration, DataSourcesIndex, DataSourcesIngestConfig, DataSourcesIngestUpdate, DataSourcesLinkResult, DataSourcesListEntry, DataSourcesListResult, DataSourcesMigration, DataSourcesMoveResult, DataSourcesPassage, DataSourcesPassagesResult, DataSourcesPlacement, DataSourcesPromoteResult, DataSourcesRelink, DataSourcesRetrievalConfig, DataSourcesRetrievalUpdate, DataSourcesRevectorizeResult, DataSourcesSampleResult, DataSourcesSearchCitation, DataSourcesSearchResult, DataSourcesSearchResultItem, DataSourcesUploadTokenResult, DatasetFile, DbHistoryResult, DbQueryResult, DiagnosticsAuditEnvironment, DiagnosticsDashboardResult, DiagnosticsFinding, DiagnosticsLighthouseScores, DiagnosticsPayload, DiagnosticsReleaseResult, DiagnosticsRuntimeFindings, DomainsCheckResult, DomainsCustomAddResult, DomainsCustomCheckResult, DomainsCustomHostnameUiStatus, DomainsCustomHostnameView, DomainsCustomListResult, DomainsCustomRemoveResult, DomainsCustomRetryResult, DomainsDnsInstructions, DomainsGetResult, DomainsSetResult, EmailBatchLifecycle, EmailBatchResult, EmailBatchSummary, EmailBatchesResult, EmailDomainBase, EmailEffectiveSender, EmailInboxResult, EmailListResult, EmailMessageKind, EmailMessageResult, EmailMessageStatus, EmailSenderTier, EmailSendingStatusResult, EmailStatsResult, EmailSummary, EmailSuppressResult, EmailSuppressionsResult, EmailUnsuppressResult, EvalAggregates, EvalCompareResult, EvalExpectation, EvalQueriesAddResult, EvalQueriesListResult, EvalQuery, EvalQueryResult, EvalQueryStyle, EvalRetrieval, EvalRun, EvalRunResult, EvalRunState, EvalRunsListResult, EvalSet, EvalSetGetResult, EvalSetResult, EvalSetState, EvalSetsListResult, EventChannelActivity, EventsChannelsListResult, EventsPublishResult, EventsTailFrame, FilesDeleteResult, FilesFileMeta, FilesListEntry, FilesListResult, FilesLsResult, FilesScanBadge, FilesScanFlagged, FilesScanStore, FilesStatResult, FilesStoreSummaryEntry, FilesUploadUrlResult, FilesUrlResult, FrontendErrorType, InboundDnsInstructions, InboundEmailDomainAddResult, InboundEmailDomainCheckResult, InboundEmailDomainDeleteResult, InboundEmailDomainUiStatus, InboundEmailDomainVerifyResult, InboundEmailDomainView, InboundEmailDomainsListResult, InboxEmailPreview, IssueAuthorKind, IssueCommentRow, IssueEventType, IssueRow, IssueStatus, IssuesCommentResult, IssuesCreateResult, IssuesDeleteResult, IssuesGetResult, IssuesListResult, IssuesUpdateResult, JewelPairRow, JewelPairSummaryRow, JewelVerdict, JewelsDatasetSummary, JewelsDryrunResult, JewelsExportResult, JewelsGradeResult, JewelsGrading, JewelsOverviewResult, JewelsPairResult, JewelsPairsResult, JewelsQueueResult, JewelsResolveResult, JewelsRunResult, JewelsRunsResult, JewelsTimeseriesBucket, JewelsTimeseriesResult, JewelsTrainResult, LiftedDatabase, MethodsInvokeResult, OperationProgress, OutboundDnsInstructions, OutboundDnsRecord, OutboundEmailDomainAddResult, OutboundEmailDomainCheckResult, OutboundEmailDomainDeleteResult, OutboundEmailDomainUiStatus, OutboundEmailDomainVerifyResult, OutboundEmailDomainView, OutboundEmailDomainsListResult, PlatformSuppression, PrerenderGetResult, PrerenderInvalidateResult, PrerenderPage, PrerenderPagesResult, PrerenderViewResult, PreviewShareLink, PreviewShareListResult, PreviewShareResult, PreviewShareRevokeResult, RegisteredDomainConnection, RegisteredDomainOffer, RegisteredDomainQuote, RegisteredDomainRecordType, RegisteredDomainRecords, RegisteredDomainStatus, RegisteredDomainView, RegisteredDomainZoneRecord, RegisteredDomainsBuyResult, RegisteredDomainsContactResult, RegisteredDomainsContactSetResult, RegisteredDomainsListResult, RegisteredDomainsQuoteResult, RegisteredDomainsRecordDeleteResult, RegisteredDomainsRecordResult, RegisteredDomainsSearchResult, RegisteredDomainsZoneResult, RegistrantContact, ReleaseFailureFields, ReleaseFragment, ReleasesByCommitResult, ReleasesGetResult, ReleasesListResult, RequestsGetResult, RequestsListResult, RequestsListRow, RequestsStatsMethodBucket, RequestsStatsMethodResult, RequestsStatsSummaryBucket, RequestsStatsSummaryResult, SecretsDeleteResult, SecretsGetResult, SecretsListResult, SecretsSetResult, SettingsResult, SuppressionSource, TaskTraceOutcome, TaskTraceSummary, TaskTranscriptMessage, TaskTurnError, TasksGetResult, TasksListResult, TrainingLogEntry, TrainingRunRow, TrainingRunStatus, UserAuthProvider, UserListItem, UserRecord, UsersCreateApiKeyResult, UsersListResult, UsersRevokeApiKeyResult, UsersSetRoleResult, V2AppSettings, V2BuildLogEntry, V2BuildStats, V2CommitInfo, V2EmailMessage, V2ReleaseStatus, VoiceAvailableNumber, VoiceNumbersBuyResult, VoiceNumbersListResult, VoiceNumbersReleaseResult, VoiceNumbersSearchResult, VoiceNumbersSetNameResult, VoicePhoneNumberStatus, VoicePhoneNumberView, VoiceResolvedPolicy, VoiceSessionChannel, VoiceSessionCost, VoiceSessionCostLine, VoiceSessionDetail, VoiceSessionGetResult, VoiceSessionListItem, VoiceSessionSip, VoiceSessionSpeechEntry, VoiceSessionStatus, VoiceSessionToolEntry, VoiceSessionTranscriptEntry, VoiceSessionsListResult, VoiceSettingsCeilings, VoiceSettingsGetResult, VoiceSettingsOverrides, VoiceSettingsSetResult, WorkspaceApp, WorkspaceRegistrantContact };
+export type { AdminClient, AdminClientOptions, AdminContext, AgentThreadDetail, AgentThreadListItem, AgentThreadsGetResult, AgentThreadsListResult, AgentToolCall, AgentTranscriptMessage, AgentTurnError, AnalyticsAiHostRow, AnalyticsAiSourcesResult, AnalyticsAiVendorRow, AnalyticsBatchResult, AnalyticsCrawlersOverviewResult, AnalyticsCrawlersRecentResult, AnalyticsCrawlersRecentRow, AnalyticsCrawlersResult, AnalyticsCrawlersTimeseriesBucket, AnalyticsCrawlersTimeseriesResult, AnalyticsLiveResult, AnalyticsMapPoint, AnalyticsMapResult, AnalyticsMetric, AnalyticsQueryResult, AnalyticsQueryResultRow, AnalyticsSourceRow, AnalyticsSourcesResult, AppCronJobStatus, AppCronJobStatusReason, AppCronRunState, AppEmailSuppression, AppSecretRow, AppsListPage, AppsListResult, BoughtDomain, CrashGroup, CrashOccurrenceRow, CrashesGetResult, CrashesListResult, CrashesOccurrencesResult, CrashesStatsBucket, CrashesStatsResult, CronJobDecorated, CronOverviewResult, CronRunResult, CronRunSummary, DashboardLiveRelease, DashboardReleaseMethod, DashboardResult, DataLiftFromDevResult, DataLiftFromLiveResult, DataSourceConnector, DataSourceConnectorCredentials, DataSourceConnectorDeletions, DataSourceConnectorGetResult, DataSourceConnectorPolicy, DataSourceConnectorResult, DataSourceInspectReport, DataSourceInspectResult, DataSourceJob, DataSourceJobGetResult, DataSourceJobManifestTokenResult, DataSourceJobPlan, DataSourceJobResult, DataSourceJobSource, DataSourceJobState, DataSourceJobsListResult, DataSourceMapDeployResult, DataSourceMapTestDocument, DataSourceMapTestOutcome, DataSourceMapTestResult, DataSourceMapper, DataSourceObjectSelection, DataSourceQuarantineResult, DataSourceQuarantinedObject, DataSourceReader, DataSourceReaderDeliveries, DataSourceReaderRetryResult, DataSourceReaderStatusResult, DataSourceReaderTestDocument, DataSourceReaderTestResult, DataSourceRemapResult, DataSourceRereadResult, DataSourceSyncResult, DataSourcesBuildProgress, DataSourcesChunkingConfig, DataSourcesChunkingStrategy, DataSourcesConfigResult, DataSourcesConfigUpdateResult, DataSourcesCountResult, DataSourcesCreateResult, DataSourcesDeleteResult, DataSourcesDictionaryPushResult, DataSourcesDictionaryReport, DataSourcesDictionaryStatus, DataSourcesDocument, DataSourcesDocumentConfirmResult, DataSourcesDocumentDeleteManyResult, DataSourcesDocumentDeleteResult, DataSourcesDocumentSelector, DataSourcesDocumentStatus, DataSourcesDocumentsResult, DataSourcesDropResult, DataSourcesEntitiesResult, DataSourcesHydrateResult, DataSourcesHydration, DataSourcesIndex, DataSourcesIngestConfig, DataSourcesIngestUpdate, DataSourcesLinkResult, DataSourcesListEntry, DataSourcesListResult, DataSourcesMigration, DataSourcesMoveResult, DataSourcesPassage, DataSourcesPassagesResult, DataSourcesPlacement, DataSourcesPromoteResult, DataSourcesRelink, DataSourcesRetrievalConfig, DataSourcesRetrievalUpdate, DataSourcesRevectorizeResult, DataSourcesSampleResult, DataSourcesSearchCitation, DataSourcesSearchResult, DataSourcesSearchResultItem, DataSourcesUploadTokenResult, DatasetFile, DbHistoryResult, DbQueryResult, DiagnosticsAuditEnvironment, DiagnosticsDashboardResult, DiagnosticsFinding, DiagnosticsLighthouseScores, DiagnosticsPayload, DiagnosticsReleaseResult, DiagnosticsRuntimeFindings, DomainsCheckResult, DomainsCustomAddResult, DomainsCustomCheckResult, DomainsCustomHostnameUiStatus, DomainsCustomHostnameView, DomainsCustomListResult, DomainsCustomRemoveResult, DomainsCustomRetryResult, DomainsDnsInstructions, DomainsGetResult, DomainsSetResult, EmailBatchLifecycle, EmailBatchResult, EmailBatchSummary, EmailBatchesResult, EmailDomainBase, EmailEffectiveSender, EmailInboxResult, EmailListResult, EmailMessageKind, EmailMessageResult, EmailMessageStatus, EmailSenderTier, EmailSendingStatusResult, EmailStatsResult, EmailSummary, EmailSuppressResult, EmailSuppressionsResult, EmailUnsuppressResult, EvalAggregates, EvalCompareResult, EvalExpectation, EvalQueriesAddResult, EvalQueriesListResult, EvalQuery, EvalQueryResult, EvalQueryStyle, EvalRetrieval, EvalRun, EvalRunResult, EvalRunState, EvalRunsListResult, EvalSet, EvalSetGetResult, EvalSetResult, EvalSetState, EvalSetsListResult, EventChannelActivity, EventsChannelsListResult, EventsPublishResult, EventsTailFrame, FilesDeleteResult, FilesFileMeta, FilesListEntry, FilesListResult, FilesLsResult, FilesScanBadge, FilesScanFlagged, FilesScanStore, FilesStatResult, FilesStoreSummaryEntry, FilesUploadUrlResult, FilesUrlResult, FrontendErrorType, InboundDnsInstructions, InboundEmailDomainAddResult, InboundEmailDomainCheckResult, InboundEmailDomainDeleteResult, InboundEmailDomainUiStatus, InboundEmailDomainVerifyResult, InboundEmailDomainView, InboundEmailDomainsListResult, InboxEmailPreview, IssueAuthorKind, IssueCommentRow, IssueEventType, IssueRow, IssueStatus, IssuesCommentResult, IssuesCreateResult, IssuesDeleteResult, IssuesGetResult, IssuesListResult, IssuesUpdateResult, JewelPairRow, JewelPairSummaryRow, JewelVerdict, JewelsDatasetSummary, JewelsDryrunResult, JewelsExportResult, JewelsGradeResult, JewelsGrading, JewelsOverviewResult, JewelsPairResult, JewelsPairsResult, JewelsQueueResult, JewelsResolveResult, JewelsRunResult, JewelsRunsResult, JewelsTimeseriesBucket, JewelsTimeseriesResult, JewelsTrainResult, LiftedDatabase, MethodsInvokeResult, OperationProgress, OutboundDnsInstructions, OutboundDnsRecord, OutboundEmailDomainAddResult, OutboundEmailDomainCheckResult, OutboundEmailDomainDeleteResult, OutboundEmailDomainUiStatus, OutboundEmailDomainVerifyResult, OutboundEmailDomainView, OutboundEmailDomainsListResult, PlatformSuppression, PrerenderGetResult, PrerenderInvalidateResult, PrerenderPage, PrerenderPagesResult, PrerenderViewResult, PreviewShareLink, PreviewShareListResult, PreviewShareResult, PreviewShareRevokeResult, RegisteredDomainConnection, RegisteredDomainOffer, RegisteredDomainQuote, RegisteredDomainRecordType, RegisteredDomainRecords, RegisteredDomainStatus, RegisteredDomainView, RegisteredDomainZoneRecord, RegisteredDomainsBuyResult, RegisteredDomainsContactResult, RegisteredDomainsContactSetResult, RegisteredDomainsListResult, RegisteredDomainsQuoteResult, RegisteredDomainsRecordDeleteResult, RegisteredDomainsRecordResult, RegisteredDomainsSearchResult, RegisteredDomainsZoneResult, RegistrantContact, ReleaseFailureFields, ReleaseFragment, ReleasesByCommitResult, ReleasesGetResult, ReleasesListResult, RequestsGetResult, RequestsListResult, RequestsListRow, RequestsStatsMethodBucket, RequestsStatsMethodResult, RequestsStatsSummaryBucket, RequestsStatsSummaryResult, SecretsDeleteResult, SecretsGetResult, SecretsListResult, SecretsSetResult, SettingsResult, SuppressionSource, TaskTraceOutcome, TaskTraceSummary, TaskTranscriptMessage, TaskTurnError, TasksGetResult, TasksListResult, TrainingLogEntry, TrainingRunRow, TrainingRunStatus, UsageGroup, UsageGroupBy, UsageSummaryResult, UserAuthProvider, UserListItem, UserRecord, UsersCreateApiKeyResult, UsersListResult, UsersRevokeApiKeyResult, UsersSetRoleResult, V2AppSettings, V2BuildLogEntry, V2BuildStats, V2CommitInfo, V2EmailMessage, V2ReleaseStatus, VoiceAvailableNumber, VoiceNumbersBuyResult, VoiceNumbersListResult, VoiceNumbersReleaseResult, VoiceNumbersSearchResult, VoiceNumbersSetNameResult, VoicePhoneNumberStatus, VoicePhoneNumberView, VoiceResolvedPolicy, VoiceSessionChannel, VoiceSessionCost, VoiceSessionCostLine, VoiceSessionDetail, VoiceSessionGetResult, VoiceSessionListItem, VoiceSessionSip, VoiceSessionSpeechEntry, VoiceSessionStatus, VoiceSessionToolEntry, VoiceSessionTranscriptEntry, VoiceSessionsListResult, VoiceSettingsCeilings, VoiceSettingsGetResult, VoiceSettingsOverrides, VoiceSettingsSetResult, WorkspaceApp, WorkspaceRegistrantContact };