@madewithremy/admin 0.1.53 → 0.1.54

package/CHANGELOG.md

@@ -4,6 +4,18 @@ What changed in `@madewithremy/admin`, newest first, each version under its own
 
 Versions before 0.1.44 aren't recorded here.
 
+## 0.1.54
+
+### New
+
+- Inside an app's own method, `createAdminClient()` with no key runs as the method's own run, on its own app: no workspace key in the app's secrets. The method declares what it may do with `"adminPermissions"` on its `mindstudio.json` entry (`analytics.view`, `usage.view`, `voice.manage` and the rest, listed on `createAdminClient` and at the end of `remy-admin --help`). A call it doesn't declare fails with `admin_permission_required:<name>` (403), `users.manage` from a dev or preview run with `admin_permission_live_only:users.manage`, and another app with `app_credential_wrong_app`. `@mindstudio-ai/agent` is an optional peer, the app's own copy, which the client reads the run from.
+- `remy-admin usage summary [--start] [--end] [--by method|model|step]` (`admin.usage.summary`): what the app costs to run over a window, in dollars, builds left out.
+
+### Changed behavior
+
+- A client resolves its credential on each call: a key passed in, then the running method's own run, then `MINDSTUDIO_API_KEY`. Bound operations all return promises, and `client.context` is null when neither the options nor the environment name a key. Code that read `client.context` should allow for null.
+- An app that bought numbers from a method with a workspace key kept as a secret can drop the key: declare `"adminPermissions": ["voice.manage"]` on the method and call `createAdminClient()` with no options.
+
 ## 0.1.53
 
 ### Changed behavior

package/README.md

@@ -58,6 +58,27 @@ try {
 }
 ```
 
+### Inside an app's own method
+
+A Remy app's method can manage its own app with no key. Declare what it may do as `adminPermissions` on the method's entry in `mindstudio.json` (the list is on `createAdminClient`), then create the client with no options:
+
+```json
+{ "id": "admin-dashboard", "path": "dist/methods/src/adminDashboard.ts", "export": "adminDashboard", "adminPermissions": ["analytics.view", "usage.view"] }
+```
+
+```ts
+import { createAdminClient } from '@madewithremy/admin';
+const admin = createAdminClient();
+
+export async function adminDashboard() {
+  const live = await admin.analytics.live();
+  const spend = await admin.usage.summary({ startTime, endTime, groupBy: 'method' });
+  return { live, spend };
+}
+```
+
+Each call runs as the method's own run (its hook token, from `@mindstudio-ai/agent`'s request context), on the method's own app, so a client made at module scope follows every execution. A call the method doesn't declare an admin permission for fails with `admin_permission_required:<name>`; another app is `app_credential_wrong_app`, and needs a key. A key passed in always wins, and outside a method the client falls back to the environment, as above.
+
 Every response is fully typed (the shapes are hand-transcribed from the platform API). Failures throw `AdminApiError` (method/path/status/body) or `AdminTimeoutError`. Long-running composites take an `onProgress` callback (`releases.waitForCommit`, `dataSources.addDocument` / `waitForIngest`, `files.put`). The SSE/NDJSON streaming paths (`methods invoke --stream`, `jewels export --file`) are CLI-only.
 
 ## Development

package/dist/index.d.ts

@@ -5873,7 +5873,7 @@ declare function ls$1(ctx: AdminContext, params: FilesLsParams): Promise<FilesLs
  * @example
  * const { stores, totalObjects } = await admin.files.summary();
  */
-declare function summary(ctx: AdminContext): Promise<FilesListResult>;
+declare function summary$1(ctx: AdminContext): Promise<FilesListResult>;
 /**
  * Delete one object from a store.
  *
@@ -5893,9 +5893,8 @@ declare const files_put: typeof put;
 declare const files_remove: typeof remove;
 declare const files_sign: typeof sign;
 declare const files_stat: typeof stat;
-declare const files_summary: typeof summary;
 declare namespace files {
-  export { files_fetchBytes as fetchBytes, ls$1 as ls, files_put as put, files_remove as remove, files_sign as sign, files_stat as stat, files_summary as summary };
+  export { files_fetchBytes as fetchBytes, ls$1 as ls, files_put as put, files_remove as remove, files_sign as sign, files_stat as stat, summary$1 as summary };
   export type { files_FileAccess as FileAccess, files_FileRef as FileRef, files_FilesLsParams as FilesLsParams, files_FilesPutParams as FilesPutParams };
 }
 
@@ -8530,6 +8529,82 @@ declare namespace settings {
   };
 }
 
+/**
+ * Response types for an app's runtime cost.
+ *
+ * Transcribed from the api (apps/api/src/):
+ *   roles/http/routes/Apps/manage/usage.ts — the route and its shape
+ */
+/** How the spend is broken down. */
+type UsageGroupBy = 'method' | 'model' | 'step';
+/** One row of the breakdown. */
+interface UsageGroup {
+    /** The method's id, the model's id, or the step type. */
+    key: string;
+    /** What it cost over the window, in dollars. */
+    costDollars: number;
+    requests: number;
+    /** Failed requests; absent for a model row. */
+    errors?: number;
+    /** For a model row, its type (`text`, `image`, …). */
+    modelType?: string;
+}
+interface UsageSummaryResult {
+    groupBy: UsageGroupBy;
+    startTime: string;
+    endTime: string;
+    /** The window's total, in dollars. */
+    totalCostDollars: number;
+    /** Most expensive first. */
+    groups: UsageGroup[];
+}
+
+/**
+ * Usage operations: what the app costs to run.
+ *
+ * Ops are pure: (ctx, params) → typed result, throwing AdminApiError /
+ * AdminTimeoutError. No printing, no process coupling — the CLI skin in
+ * commands/usage.ts and the importable client both call these.
+ */
+
+interface UsageSummaryParams {
+    /** Window start, ISO 8601. */
+    startTime: string;
+    /** Window end, ISO 8601, after `startTime`. */
+    endTime: string;
+    /**
+     * The breakdown (default `method`): `method` is the spend each method
+     * drove, `model` the models' share, `step` the whole spend by action,
+     * models and everything else.
+     */
+    groupBy?: UsageGroupBy;
+}
+/**
+ * The app's runtime spend over a window, broken down one way, in dollars.
+ * Builds (Remy's own work on the app) aren't counted.
+ *
+ * In a method, needs the `usage.view` admin permission.
+ *
+ * @throws AdminApiError `invalid_window` (400) — a date that doesn't parse, or
+ *   an end not after the start; `invalid_group_by` (400);
+ *   `admin_permission_required:usage.view` (403) — a method that doesn't
+ *   declare it.
+ * @example
+ * const { totalCostDollars, groups } = await admin.usage.summary({
+ *   startTime: '2026-10-01T00:00:00Z',
+ *   endTime: '2026-11-01T00:00:00Z',
+ *   groupBy: 'method',
+ * });
+ */
+declare function summary(ctx: AdminContext, params: UsageSummaryParams): Promise<UsageSummaryResult>;
+
+type usage_UsageSummaryParams = UsageSummaryParams;
+declare const usage_summary: typeof summary;
+declare namespace usage {
+  export { usage_summary as summary };
+  export type { usage_UsageSummaryParams as UsageSummaryParams };
+}
+
 /**
  * Response types for the v2 app users endpoints.
  *
@@ -8911,9 +8986,11 @@ interface NumbersBuyParams {
  *
  * The number is an inbound line to the app's voice agent and a caller ID for
  * `voice.call()`. An app can hold several, one per tenant say, up to its
- * workspace's limit (10 unless support raised it), and app code can buy and
- * release them with this client. A `pending` status usually activates within
- * seconds; poll `numbersList` to confirm.
+ * workspace's limit (10 unless support raised it), and the app's own methods
+ * can buy and release them with this client by declaring the `voice.manage`
+ * admin permission. A
+ * `pending` status usually activates within seconds; poll `numbersList` to
+ * confirm.
  *
  * @throws AdminApiError `invalid_phone_number` (400) — not a valid +1 E.164
  *   US number; `phone_number_limit_reached` (422) — the workspace holds as
@@ -9043,30 +9120,46 @@ declare namespace voice {
 }
 
 interface AdminClientOptions {
-    /** Org-scoped `sk_` API key. Falls back to MINDSTUDIO_API_KEY. */
+    /**
+     * Org-scoped `sk_` API key. Inside an app's method, leave it out: the
+     * method's own run is the credential, holding the `adminPermissions` its
+     * `mindstudio.json` entry declares. Elsewhere it falls back to
+     * MINDSTUDIO_API_KEY.
+     */
     apiKey?: string;
     /**
-     * The app to manage. Falls back to the workspace's mindstudio.json —
-     * pass explicitly anywhere that file doesn't exist.
+     * The app to manage. Inside a method, the method's own app. Elsewhere it
+     * falls back to the workspace's mindstudio.json — pass explicitly anywhere
+     * that file doesn't exist.
      */
     appId?: string;
-    /** API origin. Falls back to MINDSTUDIO_BASE_URL, then the production default. */
+    /**
+     * API origin. Inside a method, the api the run calls back on. Elsewhere it
+     * falls back to MINDSTUDIO_BASE_URL, then the production default.
+     */
     baseUrl?: string;
 }
-/** An ops module with the AdminContext pre-applied to every function. */
+/** The context one call runs with. */
+type ContextSource = () => Promise<AdminContext>;
+/** An ops module with the AdminContext applied to every function. */
 type BoundOps<T> = {
-    [K in keyof T as T[K] extends (ctx: AdminContext, ...args: never[]) => unknown ? K : never]: T[K] extends (ctx: AdminContext, ...args: infer A) => infer R ? (...args: A) => R : never;
+    [K in keyof T as T[K] extends (ctx: AdminContext, ...args: never[]) => unknown ? K : never]: T[K] extends (ctx: AdminContext, ...args: infer A) => infer R ? (...args: A) => Promise<Awaited<R>> : never;
 };
-declare function buildClient(ctx: AdminContext): {
-    /** The resolved context this client is bound to. */
-    context: Readonly<AdminContext>;
+declare function buildClient(source: ContextSource, context: AdminContext | null): {
+    /**
+     * The context the client uses outside a running method: its options, or
+     * the environment. Null when neither names a key, as in a method, where
+     * each call takes the run's own.
+     */
+    context: Readonly<AdminContext> | null;
     /**
      * A sibling client for another app, sharing credentials.
      *
      * The app we came from becomes the origin, so a write through the returned
      * client records which app acted — the same rule the CLI's `--app` follows.
      * Chaining `forApp` twice keeps the FIRST app as the origin, since that is
-     * the one whose workspace this code is running in.
+     * the one whose workspace this code is running in. A method's own
+     * credential acts on its own app only, so from a method this needs a key.
      */
     forApp(appId: string): /*elided*/ any;
     agent: BoundOps<typeof agent>;
@@ -9115,6 +9208,7 @@ declare function buildClient(ctx: AdminContext): {
     requests: BoundOps<typeof requests>;
     secrets: BoundOps<typeof secrets>;
     settings: BoundOps<typeof settings>;
+    usage: BoundOps<typeof usage>;
     users: BoundOps<typeof users>;
     voice: BoundOps<typeof voice>;
 };
@@ -9122,10 +9216,53 @@ type AdminClient = ReturnType<typeof buildClient>;
 /**
  * Create a client bound to one app.
  *
+ * Inside an app's method, with no options, it acts on the method's own app as
+ * the method's own run: no key in the app's secrets. Each operation needs the
+ * admin permission the method declares in `mindstudio.json`
+ * (`"adminPermissions": ["analytics.view"]`), and an undeclared one fails with
+ * `admin_permission_required:<name>`.
+ *
+ * The admin permissions, by the client namespaces they open (`.manage`
+ * includes its `.view`):
+ *
+ * | Admin permission | Opens |
+ * |---|---|
+ * | `analytics.view` | `analytics` |
+ * | `usage.view` | `usage` |
+ * | `requests.view` | `requests`, `crashes` |
+ * | `agent.view` / `tasks.view` | `agent` / `tasks` |
+ * | `voice.view` / `voice.manage` | `voice` reads: call log, transcripts, settings, numbers list / buying, releasing and naming numbers, settings writes |
+ * | `users.view` / `users.manage` | `users` reads / roles and app-user API keys, live runs only (`admin_permission_live_only:users.manage` from dev or a preview) |
+ * | `settings.manage` | `settings` |
+ * | `email.view` / `email.manage` | `email` reads: log, batches, status, inbox, domains list / suppressions and the sending and receiving domains |
+ * | `domains.manage` | `domains`' custom domains and subdomain (not buying domains, which is the workspace's) |
+ * | `issues.view` / `issues.manage` | `issues` on this app, reads / writes as the app |
+ * | `datasources.manage` | `dataSources` and its jobs, connectors, evals, mappers and readers |
+ * | `cron.view` / `cron.manage` | `cron` overview / run now |
+ * | `releases.view` | `releases`, `diagnostics`' release reads |
+ *
+ * The rules:
+ * - Only the method's own app: `forApp()` and another `appId` get
+ *   `app_credential_wrong_app`. Another app or the workspace needs a key.
+ * - Not in a jewel's shadow run or a data source's mapper or reader run
+ *   (`admin_permission_unavailable`).
+ * - Publishing the declaration is the consent, and any visitor who can call
+ *   the method can make it use what it holds, so gate the method accordingly.
+ * - Never an admin permission: secrets (a method has its own in
+ *   `process.env`) and builder operations (deploys, data lifts, previews,
+ *   infra, jewel training). What `@mindstudio-ai/agent` already does needs
+ *   none.
+ *
  * ```ts
  * import { createAdminClient } from '@madewithremy/admin';
- * const admin = createAdminClient({ apiKey: 'sk_…', appId: 'app_…' });
- * const { releases } = await admin.releases.list({ limit: 5 });
+ *
+ * // In a method declaring "adminPermissions": ["analytics.view"]
+ * const admin = createAdminClient();
+ * const live = await admin.analytics.live();
+ *
+ * // Anywhere else, with a workspace API key
+ * const other = createAdminClient({ apiKey: 'sk_…', appId: 'app_…' });
+ * const { releases } = await other.releases.list({ limit: 5 });
  * ```
  */
 declare function createAdminClient(options?: AdminClientOptions): AdminClient;
@@ -9162,4 +9299,4 @@ declare class AdminTimeoutError extends Error {
 declare const admin: AdminClient;
 
 export { AdminApiError, AdminTimeoutError, admin, createAdminClient, admin as default };
-export type { AdminClient, AdminClientOptions, AdminContext, AgentThreadDetail, AgentThreadListItem, AgentThreadsGetResult, AgentThreadsListResult, AgentToolCall, AgentTranscriptMessage, AgentTurnError, AnalyticsAiHostRow, AnalyticsAiSourcesResult, AnalyticsAiVendorRow, AnalyticsBatchResult, AnalyticsCrawlersOverviewResult, AnalyticsCrawlersRecentResult, AnalyticsCrawlersRecentRow, AnalyticsCrawlersResult, AnalyticsCrawlersTimeseriesBucket, AnalyticsCrawlersTimeseriesResult, AnalyticsLiveResult, AnalyticsMapPoint, AnalyticsMapResult, AnalyticsMetric, AnalyticsQueryResult, AnalyticsQueryResultRow, AnalyticsSourceRow, AnalyticsSourcesResult, AppCronJobStatus, AppCronJobStatusReason, AppCronRunState, AppEmailSuppression, AppSecretRow, AppsListPage, AppsListResult, BoughtDomain, CrashGroup, CrashOccurrenceRow, CrashesGetResult, CrashesListResult, CrashesOccurrencesResult, CrashesStatsBucket, CrashesStatsResult, CronJobDecorated, CronOverviewResult, CronRunResult, CronRunSummary, DashboardLiveRelease, DashboardReleaseMethod, DashboardResult, DataLiftFromDevResult, DataLiftFromLiveResult, DataSourceConnector, DataSourceConnectorCredentials, DataSourceConnectorDeletions, DataSourceConnectorGetResult, DataSourceConnectorPolicy, DataSourceConnectorResult, DataSourceInspectReport, DataSourceInspectResult, DataSourceJob, DataSourceJobGetResult, DataSourceJobManifestTokenResult, DataSourceJobPlan, DataSourceJobResult, DataSourceJobSource, DataSourceJobState, DataSourceJobsListResult, DataSourceMapDeployResult, DataSourceMapTestDocument, DataSourceMapTestOutcome, DataSourceMapTestResult, DataSourceMapper, DataSourceObjectSelection, DataSourceQuarantineResult, DataSourceQuarantinedObject, DataSourceReader, DataSourceReaderDeliveries, DataSourceReaderRetryResult, DataSourceReaderStatusResult, DataSourceReaderTestDocument, DataSourceReaderTestResult, DataSourceRemapResult, DataSourceRereadResult, DataSourceSyncResult, DataSourcesBuildProgress, DataSourcesChunkingConfig, DataSourcesChunkingStrategy, DataSourcesConfigResult, DataSourcesConfigUpdateResult, DataSourcesCountResult, DataSourcesCreateResult, DataSourcesDeleteResult, DataSourcesDictionaryPushResult, DataSourcesDictionaryReport, DataSourcesDictionaryStatus, DataSourcesDocument, DataSourcesDocumentConfirmResult, DataSourcesDocumentDeleteManyResult, DataSourcesDocumentDeleteResult, DataSourcesDocumentSelector, DataSourcesDocumentStatus, DataSourcesDocumentsResult, DataSourcesDropResult, DataSourcesEntitiesResult, DataSourcesHydrateResult, DataSourcesHydration, DataSourcesIndex, DataSourcesIngestConfig, DataSourcesIngestUpdate, DataSourcesLinkResult, DataSourcesListEntry, DataSourcesListResult, DataSourcesMigration, DataSourcesMoveResult, DataSourcesPassage, DataSourcesPassagesResult, DataSourcesPlacement, DataSourcesPromoteResult, DataSourcesRelink, DataSourcesRetrievalConfig, DataSourcesRetrievalUpdate, DataSourcesRevectorizeResult, DataSourcesSampleResult, DataSourcesSearchCitation, DataSourcesSearchResult, DataSourcesSearchResultItem, DataSourcesUploadTokenResult, DatasetFile, DbHistoryResult, DbQueryResult, DiagnosticsAuditEnvironment, DiagnosticsDashboardResult, DiagnosticsFinding, DiagnosticsLighthouseScores, DiagnosticsPayload, DiagnosticsReleaseResult, DiagnosticsRuntimeFindings, DomainsCheckResult, DomainsCustomAddResult, DomainsCustomCheckResult, DomainsCustomHostnameUiStatus, DomainsCustomHostnameView, DomainsCustomListResult, DomainsCustomRemoveResult, DomainsCustomRetryResult, DomainsDnsInstructions, DomainsGetResult, DomainsSetResult, EmailBatchLifecycle, EmailBatchResult, EmailBatchSummary, EmailBatchesResult, EmailDomainBase, EmailEffectiveSender, EmailInboxResult, EmailListResult, EmailMessageKind, EmailMessageResult, EmailMessageStatus, EmailSenderTier, EmailSendingStatusResult, EmailStatsResult, EmailSummary, EmailSuppressResult, EmailSuppressionsResult, EmailUnsuppressResult, EvalAggregates, EvalCompareResult, EvalExpectation, EvalQueriesAddResult, EvalQueriesListResult, EvalQuery, EvalQueryResult, EvalQueryStyle, EvalRetrieval, EvalRun, EvalRunResult, EvalRunState, EvalRunsListResult, EvalSet, EvalSetGetResult, EvalSetResult, EvalSetState, EvalSetsListResult, EventChannelActivity, EventsChannelsListResult, EventsPublishResult, EventsTailFrame, FilesDeleteResult, FilesFileMeta, FilesListEntry, FilesListResult, FilesLsResult, FilesScanBadge, FilesScanFlagged, FilesScanStore, FilesStatResult, FilesStoreSummaryEntry, FilesUploadUrlResult, FilesUrlResult, FrontendErrorType, InboundDnsInstructions, InboundEmailDomainAddResult, InboundEmailDomainCheckResult, InboundEmailDomainDeleteResult, InboundEmailDomainUiStatus, InboundEmailDomainVerifyResult, InboundEmailDomainView, InboundEmailDomainsListResult, InboxEmailPreview, IssueAuthorKind, IssueCommentRow, IssueEventType, IssueRow, IssueStatus, IssuesCommentResult, IssuesCreateResult, IssuesDeleteResult, IssuesGetResult, IssuesListResult, IssuesUpdateResult, JewelPairRow, JewelPairSummaryRow, JewelVerdict, JewelsDatasetSummary, JewelsDryrunResult, JewelsExportResult, JewelsGradeResult, JewelsGrading, JewelsOverviewResult, JewelsPairResult, JewelsPairsResult, JewelsQueueResult, JewelsResolveResult, JewelsRunResult, JewelsRunsResult, JewelsTimeseriesBucket, JewelsTimeseriesResult, JewelsTrainResult, LiftedDatabase, MethodsInvokeResult, OperationProgress, OutboundDnsInstructions, OutboundDnsRecord, OutboundEmailDomainAddResult, OutboundEmailDomainCheckResult, OutboundEmailDomainDeleteResult, OutboundEmailDomainUiStatus, OutboundEmailDomainVerifyResult, OutboundEmailDomainView, OutboundEmailDomainsListResult, PlatformSuppression, PrerenderGetResult, PrerenderInvalidateResult, PrerenderPage, PrerenderPagesResult, PrerenderViewResult, PreviewShareLink, PreviewShareListResult, PreviewShareResult, PreviewShareRevokeResult, RegisteredDomainConnection, RegisteredDomainOffer, RegisteredDomainQuote, RegisteredDomainRecordType, RegisteredDomainRecords, RegisteredDomainStatus, RegisteredDomainView, RegisteredDomainZoneRecord, RegisteredDomainsBuyResult, RegisteredDomainsContactResult, RegisteredDomainsContactSetResult, RegisteredDomainsListResult, RegisteredDomainsQuoteResult, RegisteredDomainsRecordDeleteResult, RegisteredDomainsRecordResult, RegisteredDomainsSearchResult, RegisteredDomainsZoneResult, RegistrantContact, ReleaseFailureFields, ReleaseFragment, ReleasesByCommitResult, ReleasesGetResult, ReleasesListResult, RequestsGetResult, RequestsListResult, RequestsListRow, RequestsStatsMethodBucket, RequestsStatsMethodResult, RequestsStatsSummaryBucket, RequestsStatsSummaryResult, SecretsDeleteResult, SecretsGetResult, SecretsListResult, SecretsSetResult, SettingsResult, SuppressionSource, TaskTraceOutcome, TaskTraceSummary, TaskTranscriptMessage, TaskTurnError, TasksGetResult, TasksListResult, TrainingLogEntry, TrainingRunRow, TrainingRunStatus, UserAuthProvider, UserListItem, UserRecord, UsersCreateApiKeyResult, UsersListResult, UsersRevokeApiKeyResult, UsersSetRoleResult, V2AppSettings, V2BuildLogEntry, V2BuildStats, V2CommitInfo, V2EmailMessage, V2ReleaseStatus, VoiceAvailableNumber, VoiceNumbersBuyResult, VoiceNumbersListResult, VoiceNumbersReleaseResult, VoiceNumbersSearchResult, VoiceNumbersSetNameResult, VoicePhoneNumberStatus, VoicePhoneNumberView, VoiceResolvedPolicy, VoiceSessionChannel, VoiceSessionCost, VoiceSessionCostLine, VoiceSessionDetail, VoiceSessionGetResult, VoiceSessionListItem, VoiceSessionSip, VoiceSessionSpeechEntry, VoiceSessionStatus, VoiceSessionToolEntry, VoiceSessionTranscriptEntry, VoiceSessionsListResult, VoiceSettingsCeilings, VoiceSettingsGetResult, VoiceSettingsOverrides, VoiceSettingsSetResult, WorkspaceApp, WorkspaceRegistrantContact };
+export type { AdminClient, AdminClientOptions, AdminContext, AgentThreadDetail, AgentThreadListItem, AgentThreadsGetResult, AgentThreadsListResult, AgentToolCall, AgentTranscriptMessage, AgentTurnError, AnalyticsAiHostRow, AnalyticsAiSourcesResult, AnalyticsAiVendorRow, AnalyticsBatchResult, AnalyticsCrawlersOverviewResult, AnalyticsCrawlersRecentResult, AnalyticsCrawlersRecentRow, AnalyticsCrawlersResult, AnalyticsCrawlersTimeseriesBucket, AnalyticsCrawlersTimeseriesResult, AnalyticsLiveResult, AnalyticsMapPoint, AnalyticsMapResult, AnalyticsMetric, AnalyticsQueryResult, AnalyticsQueryResultRow, AnalyticsSourceRow, AnalyticsSourcesResult, AppCronJobStatus, AppCronJobStatusReason, AppCronRunState, AppEmailSuppression, AppSecretRow, AppsListPage, AppsListResult, BoughtDomain, CrashGroup, CrashOccurrenceRow, CrashesGetResult, CrashesListResult, CrashesOccurrencesResult, CrashesStatsBucket, CrashesStatsResult, CronJobDecorated, CronOverviewResult, CronRunResult, CronRunSummary, DashboardLiveRelease, DashboardReleaseMethod, DashboardResult, DataLiftFromDevResult, DataLiftFromLiveResult, DataSourceConnector, DataSourceConnectorCredentials, DataSourceConnectorDeletions, DataSourceConnectorGetResult, DataSourceConnectorPolicy, DataSourceConnectorResult, DataSourceInspectReport, DataSourceInspectResult, DataSourceJob, DataSourceJobGetResult, DataSourceJobManifestTokenResult, DataSourceJobPlan, DataSourceJobResult, DataSourceJobSource, DataSourceJobState, DataSourceJobsListResult, DataSourceMapDeployResult, DataSourceMapTestDocument, DataSourceMapTestOutcome, DataSourceMapTestResult, DataSourceMapper, DataSourceObjectSelection, DataSourceQuarantineResult, DataSourceQuarantinedObject, DataSourceReader, DataSourceReaderDeliveries, DataSourceReaderRetryResult, DataSourceReaderStatusResult, DataSourceReaderTestDocument, DataSourceReaderTestResult, DataSourceRemapResult, DataSourceRereadResult, DataSourceSyncResult, DataSourcesBuildProgress, DataSourcesChunkingConfig, DataSourcesChunkingStrategy, DataSourcesConfigResult, DataSourcesConfigUpdateResult, DataSourcesCountResult, DataSourcesCreateResult, DataSourcesDeleteResult, DataSourcesDictionaryPushResult, DataSourcesDictionaryReport, DataSourcesDictionaryStatus, DataSourcesDocument, DataSourcesDocumentConfirmResult, DataSourcesDocumentDeleteManyResult, DataSourcesDocumentDeleteResult, DataSourcesDocumentSelector, DataSourcesDocumentStatus, DataSourcesDocumentsResult, DataSourcesDropResult, DataSourcesEntitiesResult, DataSourcesHydrateResult, DataSourcesHydration, DataSourcesIndex, DataSourcesIngestConfig, DataSourcesIngestUpdate, DataSourcesLinkResult, DataSourcesListEntry, DataSourcesListResult, DataSourcesMigration, DataSourcesMoveResult, DataSourcesPassage, DataSourcesPassagesResult, DataSourcesPlacement, DataSourcesPromoteResult, DataSourcesRelink, DataSourcesRetrievalConfig, DataSourcesRetrievalUpdate, DataSourcesRevectorizeResult, DataSourcesSampleResult, DataSourcesSearchCitation, DataSourcesSearchResult, DataSourcesSearchResultItem, DataSourcesUploadTokenResult, DatasetFile, DbHistoryResult, DbQueryResult, DiagnosticsAuditEnvironment, DiagnosticsDashboardResult, DiagnosticsFinding, DiagnosticsLighthouseScores, DiagnosticsPayload, DiagnosticsReleaseResult, DiagnosticsRuntimeFindings, DomainsCheckResult, DomainsCustomAddResult, DomainsCustomCheckResult, DomainsCustomHostnameUiStatus, DomainsCustomHostnameView, DomainsCustomListResult, DomainsCustomRemoveResult, DomainsCustomRetryResult, DomainsDnsInstructions, DomainsGetResult, DomainsSetResult, EmailBatchLifecycle, EmailBatchResult, EmailBatchSummary, EmailBatchesResult, EmailDomainBase, EmailEffectiveSender, EmailInboxResult, EmailListResult, EmailMessageKind, EmailMessageResult, EmailMessageStatus, EmailSenderTier, EmailSendingStatusResult, EmailStatsResult, EmailSummary, EmailSuppressResult, EmailSuppressionsResult, EmailUnsuppressResult, EvalAggregates, EvalCompareResult, EvalExpectation, EvalQueriesAddResult, EvalQueriesListResult, EvalQuery, EvalQueryResult, EvalQueryStyle, EvalRetrieval, EvalRun, EvalRunResult, EvalRunState, EvalRunsListResult, EvalSet, EvalSetGetResult, EvalSetResult, EvalSetState, EvalSetsListResult, EventChannelActivity, EventsChannelsListResult, EventsPublishResult, EventsTailFrame, FilesDeleteResult, FilesFileMeta, FilesListEntry, FilesListResult, FilesLsResult, FilesScanBadge, FilesScanFlagged, FilesScanStore, FilesStatResult, FilesStoreSummaryEntry, FilesUploadUrlResult, FilesUrlResult, FrontendErrorType, InboundDnsInstructions, InboundEmailDomainAddResult, InboundEmailDomainCheckResult, InboundEmailDomainDeleteResult, InboundEmailDomainUiStatus, InboundEmailDomainVerifyResult, InboundEmailDomainView, InboundEmailDomainsListResult, InboxEmailPreview, IssueAuthorKind, IssueCommentRow, IssueEventType, IssueRow, IssueStatus, IssuesCommentResult, IssuesCreateResult, IssuesDeleteResult, IssuesGetResult, IssuesListResult, IssuesUpdateResult, JewelPairRow, JewelPairSummaryRow, JewelVerdict, JewelsDatasetSummary, JewelsDryrunResult, JewelsExportResult, JewelsGradeResult, JewelsGrading, JewelsOverviewResult, JewelsPairResult, JewelsPairsResult, JewelsQueueResult, JewelsResolveResult, JewelsRunResult, JewelsRunsResult, JewelsTimeseriesBucket, JewelsTimeseriesResult, JewelsTrainResult, LiftedDatabase, MethodsInvokeResult, OperationProgress, OutboundDnsInstructions, OutboundDnsRecord, OutboundEmailDomainAddResult, OutboundEmailDomainCheckResult, OutboundEmailDomainDeleteResult, OutboundEmailDomainUiStatus, OutboundEmailDomainVerifyResult, OutboundEmailDomainView, OutboundEmailDomainsListResult, PlatformSuppression, PrerenderGetResult, PrerenderInvalidateResult, PrerenderPage, PrerenderPagesResult, PrerenderViewResult, PreviewShareLink, PreviewShareListResult, PreviewShareResult, PreviewShareRevokeResult, RegisteredDomainConnection, RegisteredDomainOffer, RegisteredDomainQuote, RegisteredDomainRecordType, RegisteredDomainRecords, RegisteredDomainStatus, RegisteredDomainView, RegisteredDomainZoneRecord, RegisteredDomainsBuyResult, RegisteredDomainsContactResult, RegisteredDomainsContactSetResult, RegisteredDomainsListResult, RegisteredDomainsQuoteResult, RegisteredDomainsRecordDeleteResult, RegisteredDomainsRecordResult, RegisteredDomainsSearchResult, RegisteredDomainsZoneResult, RegistrantContact, ReleaseFailureFields, ReleaseFragment, ReleasesByCommitResult, ReleasesGetResult, ReleasesListResult, RequestsGetResult, RequestsListResult, RequestsListRow, RequestsStatsMethodBucket, RequestsStatsMethodResult, RequestsStatsSummaryBucket, RequestsStatsSummaryResult, SecretsDeleteResult, SecretsGetResult, SecretsListResult, SecretsSetResult, SettingsResult, SuppressionSource, TaskTraceOutcome, TaskTraceSummary, TaskTranscriptMessage, TaskTurnError, TasksGetResult, TasksListResult, TrainingLogEntry, TrainingRunRow, TrainingRunStatus, UsageGroup, UsageGroupBy, UsageSummaryResult, UserAuthProvider, UserListItem, UserRecord, UsersCreateApiKeyResult, UsersListResult, UsersRevokeApiKeyResult, UsersSetRoleResult, V2AppSettings, V2BuildLogEntry, V2BuildStats, V2CommitInfo, V2EmailMessage, V2ReleaseStatus, VoiceAvailableNumber, VoiceNumbersBuyResult, VoiceNumbersListResult, VoiceNumbersReleaseResult, VoiceNumbersSearchResult, VoiceNumbersSetNameResult, VoicePhoneNumberStatus, VoicePhoneNumberView, VoiceResolvedPolicy, VoiceSessionChannel, VoiceSessionCost, VoiceSessionCostLine, VoiceSessionDetail, VoiceSessionGetResult, VoiceSessionListItem, VoiceSessionSip, VoiceSessionSpeechEntry, VoiceSessionStatus, VoiceSessionToolEntry, VoiceSessionTranscriptEntry, VoiceSessionsListResult, VoiceSettingsCeilings, VoiceSettingsGetResult, VoiceSettingsOverrides, VoiceSettingsSetResult, WorkspaceApp, WorkspaceRegistrantContact };

package/dist/index.js

@@ -59,13 +59,6 @@ function loadWorkspaceAppId(workspaceDir = WORKSPACE_DIR) {
   return result.value.appId;
 }
 
-// src/ops/agent.ts
-var agent_exports = {};
-__export(agent_exports, {
-  threadsGet: () => threadsGet,
-  threadsList: () => threadsList
-});
-
 // src/errors.ts
 var AdminApiError = class extends Error {
   constructor(method, path3, status2, body) {
@@ -180,7 +173,51 @@ async function tryCall(ctx, method, apiPath) {
   return { ok: res.ok, status: res.status, body: await readBody(res) };
 }
 
+// src/runningMethod.ts
+var AGENT_SDK = "@mindstudio-ai/agent";
+var agentSdk;
+var loadAgentSdk = () => agentSdk ??= import(AGENT_SDK).then(
+  (mod) => mod,
+  () => null
+);
+var appIds = /* @__PURE__ */ new Map();
+var MAX_REMEMBERED = 500;
+function appIdOf(token, baseUrl) {
+  let known = appIds.get(token);
+  if (!known) {
+    known = call(
+      { apiKey: token, appId: "", baseUrl },
+      "GET",
+      "/_internal/v2/execution/identity"
+    ).then((identity) => identity.appId);
+    known.catch(() => appIds.delete(token));
+    if (appIds.size >= MAX_REMEMBERED) {
+      appIds.delete(appIds.keys().next().value);
+    }
+    appIds.set(token, known);
+  }
+  return known;
+}
+async function runningMethodContext(options) {
+  const sdk = await loadAgentSdk();
+  const run3 = sdk?.getRequestContext?.();
+  if (!run3?.callbackToken) {
+    return null;
+  }
+  const baseUrl = (options.baseUrl ?? run3.remoteHostname ?? process.env["MINDSTUDIO_BASE_URL"] ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+  return {
+    apiKey: run3.callbackToken,
+    appId: options.appId ?? await appIdOf(run3.callbackToken, baseUrl),
+    baseUrl
+  };
+}
+
 // src/ops/agent.ts
+var agent_exports = {};
+__export(agent_exports, {
+  threadsGet: () => threadsGet,
+  threadsList: () => threadsList
+});
 function threadsList(ctx, params = {}) {
   return call(
     ctx,
@@ -1743,7 +1780,7 @@ async function primaryUrl(ctx) {
   return dashboard.primaryUrl;
 }
 function summarizeRelease(release) {
-  const summary2 = {
+  const summary3 = {
     releaseId: release.id,
     commitSha: release.commitSha,
     branch: release.branch ?? null,
@@ -1755,16 +1792,16 @@ function summarizeRelease(release) {
   };
   const readers = (release.dataSources ?? []).filter((d) => d.reader);
   if (readers.length > 0 && release.status === "live") {
-    summary2.readers = readers.map((d) => ({
+    summary3.readers = readers.map((d) => ({
       slug: d.slug,
       unread: d.readerUnread ?? 0
     }));
   }
   if (release.status !== "failed") {
-    return summary2;
+    return summary3;
   }
   return {
-    ...summary2,
+    ...summary3,
     error: release.failureReason ?? "Build failed (no error entry in the build log)",
     ...release.failureKind ? { failureKind: release.failureKind } : {},
     ...release.failurePhase ? { failurePhase: release.failurePhase } : {}
@@ -3028,6 +3065,19 @@ function updateSettings(ctx, partial) {
   ).then((res) => res.settings ?? {});
 }
 
+// src/ops/usage.ts
+var usage_exports = {};
+__export(usage_exports, {
+  summary: () => summary2
+});
+function summary2(ctx, params) {
+  return call(
+    ctx,
+    "GET",
+    `/_internal/v2/apps/${ctx.appId}/usage/summary${qs(params)}`
+  );
+}
+
 // src/ops/users.ts
 var users_exports = {};
 __export(users_exports, {
@@ -3183,11 +3233,11 @@ function settingsSet(ctx, params) {
 }
 
 // src/client.ts
-function bindOps(ops, ctx) {
+function bindOps(ops, source) {
   const bound = {};
   for (const [name, value] of Object.entries(ops)) {
     if (typeof value === "function") {
-      bound[name] = (...args) => value(ctx, ...args);
+      bound[name] = async (...args) => value(await source(), ...args);
     }
   }
   return bound;
@@ -3207,71 +3257,103 @@ function resolveOptions(options) {
     baseUrl: options.baseUrl ?? process.env["MINDSTUDIO_BASE_URL"] ?? DEFAULT_BASE_URL
   };
 }
-function buildClient(ctx) {
+function retarget(ctx, appId) {
+  return {
+    ...ctx,
+    appId,
+    originAppId: appId === ctx.appId ? ctx.originAppId : ctx.originAppId ?? ctx.appId
+  };
+}
+function buildClient(source, context) {
   return {
-    /** The resolved context this client is bound to. */
-    context: ctx,
+    /**
+     * The context the client uses outside a running method: its options, or
+     * the environment. Null when neither names a key, as in a method, where
+     * each call takes the run's own.
+     */
+    context,
     /**
      * A sibling client for another app, sharing credentials.
      *
      * The app we came from becomes the origin, so a write through the returned
      * client records which app acted — the same rule the CLI's `--app` follows.
      * Chaining `forApp` twice keeps the FIRST app as the origin, since that is
-     * the one whose workspace this code is running in.
+     * the one whose workspace this code is running in. A method's own
+     * credential acts on its own app only, so from a method this needs a key.
      */
     forApp(appId) {
-      return buildClient({
-        ...ctx,
-        appId,
-        originAppId: appId === ctx.appId ? ctx.originAppId : ctx.originAppId ?? ctx.appId
-      });
+      return buildClient(
+        async () => retarget(await source(), appId),
+        context && retarget(context, appId)
+      );
     },
-    agent: bindOps(agent_exports, ctx),
-    tasks: bindOps(tasks_exports, ctx),
-    analytics: bindOps(analytics_exports, ctx),
-    apps: bindOps(apps_exports, ctx),
-    events: bindOps(events_exports, ctx),
-    crashes: bindOps(crashes_exports, ctx),
-    cron: bindOps(cron_exports, ctx),
-    feedback: bindOps(feedback_exports, ctx),
-    data: bindOps(data_exports, ctx),
-    dataSources: bindOps(dataSources_exports, ctx),
-    dataSourceJobs: bindOps(dataSourceJobs_exports, ctx),
-    dataSourceConnectors: bindOps(dataSourceConnectors_exports, ctx),
-    dataSourceEvals: bindOps(dataSourceEvals_exports, ctx),
-    dataSourceMappers: bindOps(dataSourceMappers_exports, ctx),
-    db: bindOps(db_exports, ctx),
-    diagnostics: bindOps(diagnostics_exports, ctx),
-    domains: bindOps(domains_exports, ctx),
+    agent: bindOps(agent_exports, source),
+    tasks: bindOps(tasks_exports, source),
+    analytics: bindOps(analytics_exports, source),
+    apps: bindOps(apps_exports, source),
+    events: bindOps(events_exports, source),
+    crashes: bindOps(crashes_exports, source),
+    cron: bindOps(cron_exports, source),
+    feedback: bindOps(feedback_exports, source),
+    data: bindOps(data_exports, source),
+    dataSources: bindOps(dataSources_exports, source),
+    dataSourceJobs: bindOps(dataSourceJobs_exports, source),
+    dataSourceConnectors: bindOps(dataSourceConnectors_exports, source),
+    dataSourceEvals: bindOps(dataSourceEvals_exports, source),
+    dataSourceMappers: bindOps(dataSourceMappers_exports, source),
+    db: bindOps(db_exports, source),
+    diagnostics: bindOps(diagnostics_exports, source),
+    domains: bindOps(domains_exports, source),
     email: {
-      ...bindOps(email_exports, ctx),
+      ...bindOps(email_exports, source),
       // Hand-bound: these are generic over the direction ('sending' |
       // 'inbound') and bindOps' mapped type would erase the generic,
       // collapsing every result to the cross-direction union.
-      listDomains: (direction) => listDomains(ctx, direction),
-      checkDomain: (direction, domain) => checkDomain(ctx, direction, domain),
-      addDomain: (direction, domain) => addDomain(ctx, direction, domain),
-      verifyDomain: (direction, domain) => verifyDomain(ctx, direction, domain),
-      removeDomain: (direction, domain) => removeDomain(ctx, direction, domain)
+      listDomains: async (direction) => listDomains(await source(), direction),
+      checkDomain: async (direction, domain) => checkDomain(await source(), direction, domain),
+      addDomain: async (direction, domain) => addDomain(await source(), direction, domain),
+      verifyDomain: async (direction, domain) => verifyDomain(await source(), direction, domain),
+      removeDomain: async (direction, domain) => removeDomain(await source(), direction, domain)
     },
-    files: bindOps(files_exports, ctx),
-    infra: bindOps(infra_exports, ctx),
-    issues: bindOps(issues_exports, ctx),
-    jewels: bindOps(jewels_exports, ctx),
-    methods: bindOps(methods_exports, ctx),
-    prerender: bindOps(prerender_exports, ctx),
-    previews: bindOps(previews_exports, ctx),
-    qaRecordings: bindOps(qaRecordings_exports, ctx),
-    releases: bindOps(releases_exports, ctx),
-    requests: bindOps(requests_exports, ctx),
-    secrets: bindOps(secrets_exports, ctx),
-    settings: bindOps(settings_exports, ctx),
-    users: bindOps(users_exports, ctx),
-    voice: bindOps(voice_exports, ctx)
+    files: bindOps(files_exports, source),
+    infra: bindOps(infra_exports, source),
+    issues: bindOps(issues_exports, source),
+    jewels: bindOps(jewels_exports, source),
+    methods: bindOps(methods_exports, source),
+    prerender: bindOps(prerender_exports, source),
+    previews: bindOps(previews_exports, source),
+    qaRecordings: bindOps(qaRecordings_exports, source),
+    releases: bindOps(releases_exports, source),
+    requests: bindOps(requests_exports, source),
+    secrets: bindOps(secrets_exports, source),
+    settings: bindOps(settings_exports, source),
+    usage: bindOps(usage_exports, source),
+    users: bindOps(users_exports, source),
+    voice: bindOps(voice_exports, source)
   };
 }
 function createAdminClient(options = {}) {
-  return buildClient(resolveOptions(options));
+  if (options.apiKey) {
+    const context2 = resolveOptions(options);
+    return buildClient(async () => context2, context2);
+  }
+  let context = null;
+  let unresolved = null;
+  try {
+    context = resolveOptions(options);
+  } catch (err) {
+    unresolved = err;
+  }
+  return buildClient(async () => {
+    const running = await runningMethodContext(options);
+    if (running) {
+      return running;
+    }
+    if (!context) {
+      throw unresolved;
+    }
+    return context;
+  }, context);
 }
 
 // src/index.ts