@meetkai/mka1 0.55.2 → 0.55.4

package/src/funcs/llmVectorStoresListPermissions.ts

@@ -0,0 +1,188 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { SDKCore } from "../core.js";
+import { encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKError } from "../models/errors/sdkerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * List vector store permissions
+ *
+ * @remarks
+ * Lists who holds a role on the vector store: its owner, then its team when that permission is set, then individual principals. Anyone who can read the store can list its permissions. Organization admins of the store's team can always read it and are not listed. Returns 410 once the vector store has expired.
+ *
+ * If set, this operation will use {@link Security.bearerAuth} from the global security.
+ */
+export function llmVectorStoresListPermissions(
+  client: SDKCore,
+  request: operations.ListVectorStorePermissionsRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.VectorStorePermissionList,
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: SDKCore,
+  request: operations.ListVectorStorePermissionsRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.VectorStorePermissionList,
+      | SDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      operations.ListVectorStorePermissionsRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+
+  const pathParams = {
+    vector_store_id: encodeSimple("vector_store_id", payload.vector_store_id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc(
+    "/api/v1/llm/vector_stores/{vector_store_id}/permissions",
+  )(pathParams);
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple(
+      "X-On-Behalf-Of",
+      payload["X-On-Behalf-Of"],
+      { explode: false, charEncoding: "none" },
+    ),
+  }));
+
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "listVectorStorePermissions",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 500,
+          maxInterval: 5000,
+          exponent: 1.5,
+          maxElapsedTime: 15000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const [result] = await M.match<
+    components.VectorStorePermissionList,
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.VectorStorePermissionList$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req);
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/sessionsGetTenantResourcePolicy.ts

@@ -0,0 +1,200 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { SDKCore } from "../core.js";
+import { encodeFormQuery, encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKError } from "../models/errors/sdkerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Get
+ *
+ * If set, this operation will use {@link Security.bearerAuth} from the global security.
+ */
+export function sessionsGetTenantResourcePolicy(
+  client: SDKCore,
+  request: operations.GetTenantResourcePolicyRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.TenantResourcePolicy,
+    | errors.HTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: SDKCore,
+  request: operations.GetTenantResourcePolicyRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.TenantResourcePolicy,
+      | errors.HTTPValidationError
+      | SDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      operations.GetTenantResourcePolicyRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+
+  const pathParams = {
+    scope: encodeSimple("scope", payload.scope, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc("/api/v1/sandbox/resource-policy/{scope}")(
+    pathParams,
+  );
+
+  const query = encodeFormQuery({
+    "expected_organization_id": payload.expected_organization_id,
+    "expected_team_id": payload.expected_team_id,
+  });
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple(
+      "X-On-Behalf-Of",
+      payload["X-On-Behalf-Of"],
+      { explode: false, charEncoding: "none" },
+    ),
+  }));
+
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "getTenantResourcePolicy",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 500,
+          maxInterval: 5000,
+          exponent: 1.5,
+          maxElapsedTime: 15000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    query: query,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    components.TenantResourcePolicy,
+    | errors.HTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.TenantResourcePolicy$inboundSchema),
+    M.jsonErr(422, errors.HTTPValidationError$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/sessionsSetTenantResourcePolicy.ts

@@ -0,0 +1,203 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { SDKCore } from "../core.js";
+import { encodeFormQuery, encodeJSON, encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import * as components from "../models/components/index.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKError } from "../models/errors/sdkerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Save
+ *
+ * If set, this operation will use {@link Security.bearerAuth} from the global security.
+ */
+export function sessionsSetTenantResourcePolicy(
+  client: SDKCore,
+  request: operations.SetTenantResourcePolicyRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    components.TenantResourcePolicy,
+    | errors.HTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: SDKCore,
+  request: operations.SetTenantResourcePolicyRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      components.TenantResourcePolicy,
+      | errors.HTTPValidationError
+      | SDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      operations.SetTenantResourcePolicyRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload.SaveTenantResourcePolicy, {
+    explode: true,
+  });
+
+  const pathParams = {
+    scope: encodeSimple("scope", payload.scope, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc("/api/v1/sandbox/resource-policy/{scope}")(
+    pathParams,
+  );
+
+  const query = encodeFormQuery({
+    "expected_organization_id": payload.expected_organization_id,
+    "expected_team_id": payload.expected_team_id,
+  });
+
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+    "X-On-Behalf-Of": encodeSimple(
+      "X-On-Behalf-Of",
+      payload["X-On-Behalf-Of"],
+      { explode: false, charEncoding: "none" },
+    ),
+  }));
+
+  const secConfig = await extractSecurity(client._options.bearerAuth);
+  const securityInput = secConfig == null ? {} : { bearerAuth: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "setTenantResourcePolicy",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.bearerAuth,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || {
+        strategy: "backoff",
+        backoff: {
+          initialInterval: 500,
+          maxInterval: 5000,
+          exponent: 1.5,
+          maxElapsedTime: 15000,
+        },
+        retryConnectionErrors: true,
+      }
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "PUT",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    query: query,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    components.TenantResourcePolicy,
+    | errors.HTTPValidationError
+    | SDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, components.TenantResourcePolicy$inboundSchema),
+    M.jsonErr(422, errors.HTTPValidationError$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/lib/config.ts

@@ -65,7 +65,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.1.0",
-  sdkVersion: "0.55.2",
+  sdkVersion: "0.55.4",
   genVersion: "2.950.2",
-  userAgent: "speakeasy-sdk/typescript 0.55.2 2.950.2 1.1.0 @meetkai/mka1",
+  userAgent: "speakeasy-sdk/typescript 0.55.4 2.950.2 1.1.0 @meetkai/mka1",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.55.2",
+    currentVersion: "0.55.4",
   },
 });
 

package/src/mcp-server/server.ts

@@ -404,15 +404,19 @@ import { tool$llmVectorStoresCancelFileBatch } from "./tools/llmVectorStoresCanc
 import { tool$llmVectorStoresCreate } from "./tools/llmVectorStoresCreate.js";
 import { tool$llmVectorStoresCreateFile } from "./tools/llmVectorStoresCreateFile.js";
 import { tool$llmVectorStoresCreateFileBatch } from "./tools/llmVectorStoresCreateFileBatch.js";
+import { tool$llmVectorStoresCreatePermission } from "./tools/llmVectorStoresCreatePermission.js";
 import { tool$llmVectorStoresDelete } from "./tools/llmVectorStoresDelete.js";
 import { tool$llmVectorStoresDeleteFile } from "./tools/llmVectorStoresDeleteFile.js";
+import { tool$llmVectorStoresDeletePermission } from "./tools/llmVectorStoresDeletePermission.js";
 import { tool$llmVectorStoresGet } from "./tools/llmVectorStoresGet.js";
 import { tool$llmVectorStoresGetFile } from "./tools/llmVectorStoresGetFile.js";
 import { tool$llmVectorStoresGetFileBatch } from "./tools/llmVectorStoresGetFileBatch.js";
 import { tool$llmVectorStoresGetFileContent } from "./tools/llmVectorStoresGetFileContent.js";
+import { tool$llmVectorStoresGetPermission } from "./tools/llmVectorStoresGetPermission.js";
 import { tool$llmVectorStoresList } from "./tools/llmVectorStoresList.js";
 import { tool$llmVectorStoresListFiles } from "./tools/llmVectorStoresListFiles.js";
 import { tool$llmVectorStoresListFilesInBatch } from "./tools/llmVectorStoresListFilesInBatch.js";
+import { tool$llmVectorStoresListPermissions } from "./tools/llmVectorStoresListPermissions.js";
 import { tool$llmVectorStoresSearch } from "./tools/llmVectorStoresSearch.js";
 import { tool$llmVectorStoresUpdate } from "./tools/llmVectorStoresUpdate.js";
 import { tool$llmVectorStoresUpdateFile } from "./tools/llmVectorStoresUpdateFile.js";
@@ -470,6 +474,8 @@ import { tool$sandboxSetPricing } from "./tools/sandboxSetPricing.js";
 import { tool$sandboxTerminate } from "./tools/sandboxTerminate.js";
 import { tool$sandboxUploadArchive } from "./tools/sandboxUploadArchive.js";
 import { tool$sandboxUploadFile } from "./tools/sandboxUploadFile.js";
+import { tool$sessionsGetTenantResourcePolicy } from "./tools/sessionsGetTenantResourcePolicy.js";
+import { tool$sessionsSetTenantResourcePolicy } from "./tools/sessionsSetTenantResourcePolicy.js";
 import { tool$trackingExperimentsCreate } from "./tools/trackingExperimentsCreate.js";
 import { tool$trackingExperimentsDelete } from "./tools/trackingExperimentsDelete.js";
 import { tool$trackingExperimentsGet } from "./tools/trackingExperimentsGet.js";
@@ -501,7 +507,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "SDK",
-    version: "0.55.2",
+    version: "0.55.4",
   });
 
   const client = new SDKCore({
@@ -556,6 +562,8 @@ export function createMCPServer(deps: {
   tool(tool$sandboxUploadFile);
   tool(tool$sandboxDownloadArchive);
   tool(tool$sandboxUploadArchive);
+  tool(tool$sessionsGetTenantResourcePolicy);
+  tool(tool$sessionsSetTenantResourcePolicy);
   tool(tool$usageSandbox);
   tool(tool$usageCosts);
   tool(tool$agentsListFunctionTools);
@@ -898,6 +906,10 @@ export function createMCPServer(deps: {
   tool(tool$llmVectorStoresGetFileBatch);
   tool(tool$llmVectorStoresCancelFileBatch);
   tool(tool$llmVectorStoresListFilesInBatch);
+  tool(tool$llmVectorStoresListPermissions);
+  tool(tool$llmVectorStoresCreatePermission);
+  tool(tool$llmVectorStoresGetPermission);
+  tool(tool$llmVectorStoresDeletePermission);
   tool(tool$authOrgsGetQuota);
   tool(tool$authOrgsUpdateQuota);
   tool(tool$authOrgsGetRateLimit);

package/src/mcp-server/tools/llmModelsGetQuota.ts

@@ -14,7 +14,7 @@ export const tool$llmModelsGetQuota: ToolDefinition<typeof args> = {
   name: "llm-models-get-quota",
   description: `Read a model's token quota
 
-Read current tokens-per-minute limits without consuming tokens or starting a window. Use a concrete active model, not auto. Omit selectors for the authenticated caller's context, including its delegated external user. Human sessions may select an authorized api_key_id, plus service_account_id for a service-account key; selected keys use their ordinary, non-delegated context. Scopes with missing subject identities are omitted to avoid exposing shared fallback usage; their enforcement is unchanged. An empty limits array means no reportable token rules for this context. Untouched windows have reset_at: null; unavailable counters return 503.`,
+Read applicable token limits without consuming tokens or starting a window. Organization limits may be shared across models. Use a concrete active model, not auto. Omit selectors for the authenticated caller's context, including its delegated external user. Human sessions may select an authorized api_key_id, plus service_account_id for a service-account key; selected keys use their ordinary, non-delegated context. Scopes with missing subject identities are omitted to avoid exposing shared fallback usage; their enforcement is unchanged. An empty limits array means no reportable token rules for this context. Untouched model windows have reset_at: null; organization calendar windows always report their next UTC reset. Unavailable policies or counters return 503.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await llmModelsGetQuota(