@naturali/cli 0.74.0 → 0.76.0

package/dist/index.mjs

@@ -14,7 +14,7 @@ var __exportAll = (all, no_symbols) => {
 };
 //#endregion
 //#region package.json
-var version = "0.74.0";
+var version = "0.76.0";
 //#endregion
 //#region ../sdk/src/generated/core/bodySerializer.gen.ts
 const serializeFormDataPair = (data, key, value) => {
@@ -634,6 +634,19 @@ const createClient = (config = {}) => {
 const client = createClient(createConfig());
 //#endregion
 //#region ../sdk/src/generated/sdk.gen.ts
+var Activity = class {
+	/**
+	* List activity feed entries
+	*
+	* Returns activity entries for a project, newest first, filterable by kind and severity. Paginated with an opaque cursor rather than offset/limit — pass the previous page's `next_cursor` to fetch the next one; a `null` `next_cursor` means there is no more data.
+	*/
+	static listActivity(options) {
+		return (options.client ?? client).get({
+			url: "/v1/projects/{project_id}/activity",
+			...options
+		});
+	}
+};
 var Actors = class {
 	/**
 	* List actors
@@ -1523,6 +1536,41 @@ var Assistant = class {
 		});
 	}
 };
+var AuditLog = class {
+	/**
+	* List audit entries
+	*
+	* Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `srn:{project}:secret:` matches every secret action); every other filter is exact.
+	*/
+	static listAuditEntries(options) {
+		return (options.client ?? client).get({
+			url: "/v1/projects/{project_id}/audit-log",
+			...options
+		});
+	}
+	/**
+	* Export audit entries as NDJSON
+	*
+	* Streams a project's audit-log entries as newline-delimited JSON — one entry object per line, oldest first — for archival before the retention window expires, or for shipping into an external system. `project_id` is required: the export is per-project by design. Filters behave exactly as they do on the list endpoint.
+	*/
+	static exportAuditEntries(options) {
+		return (options.client ?? client).get({
+			url: "/v1/projects/{project_id}/audit-log/export",
+			...options
+		});
+	}
+	/**
+	* Get an audit entry
+	*
+	* Returns a single audit-log entry, including its `detail` payload
+	*/
+	static getAuditEntry(options) {
+		return (options.client ?? client).get({
+			url: "/v1/projects/{project_id}/audit-log/{entry_id}",
+			...options
+		});
+	}
+};
 var Auth = class {
 	/**
 	* Email a sign-in code
@@ -3261,6 +3309,71 @@ var Projects = class {
 		});
 	}
 };
+var Quotas = class {
+	/**
+	* List quotas
+	*
+	* Returns the quotas defined in a project
+	*/
+	static listQuotas(options) {
+		return (options.client ?? client).get({
+			url: "/v1/projects/{project_id}/quotas",
+			...options
+		});
+	}
+	/**
+	* Create a quota
+	*
+	* Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.
+	*/
+	static createQuota(options) {
+		return (options.client ?? client).post({
+			url: "/v1/projects/{project_id}/quotas",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Delete a quota
+	*
+	* Deletes a quota and drops its window counters
+	*/
+	static deleteQuota(options) {
+		return (options.client ?? client).delete({
+			url: "/v1/projects/{project_id}/quotas/{quota_id}",
+			...options
+		});
+	}
+	/**
+	* Get a quota
+	*
+	* Returns a specific quota, including current window usage
+	*/
+	static getQuota(options) {
+		return (options.client ?? client).get({
+			url: "/v1/projects/{project_id}/quotas/{quota_id}",
+			...options
+		});
+	}
+	/**
+	* Update a quota
+	*
+	* Updates a quota's limit and/or mode. Other fields are immutable.
+	*/
+	static updateQuota(options) {
+		return (options.client ?? client).patch({
+			url: "/v1/projects/{project_id}/quotas/{quota_id}",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
 var Secrets = class {
 	/**
 	* List secrets
@@ -4167,12 +4280,14 @@ const API_BASE_URL$1 = "https://api.naturali.ai";
 * is available as typed data.
 */
 var NaturaliClient = class {
+	activity;
 	actors;
 	agents;
 	agentVersions;
 	aiProviders;
 	apiKeys;
 	approvals;
+	auditLog;
 	assistant;
 	channels;
 	auth;
@@ -4189,6 +4304,7 @@ var NaturaliClient = class {
 	memories;
 	memoryEntries;
 	modelRoutes;
+	quotas;
 	models;
 	orchestrations;
 	projects;
@@ -4211,12 +4327,14 @@ var NaturaliClient = class {
 				...headers
 			}
 		}));
+		this.activity = bindResource(Activity, this.http);
 		this.actors = bindResource(Actors, this.http);
 		this.agents = bindResource(Agents, this.http);
 		this.agentVersions = bindResource(AgentVersions, this.http);
 		this.aiProviders = bindResource(AiProviders, this.http);
 		this.apiKeys = bindResource(ApiKeys, this.http);
 		this.approvals = bindResource(Approvals, this.http);
+		this.auditLog = bindResource(AuditLog, this.http);
 		this.assistant = bindResource(Assistant, this.http);
 		this.channels = bindResource(Channels, this.http);
 		this.auth = bindResource(Auth, this.http);
@@ -4233,6 +4351,7 @@ var NaturaliClient = class {
 		this.memories = bindResource(Memories, this.http);
 		this.memoryEntries = bindResource(MemoryEntries, this.http);
 		this.modelRoutes = bindResource(ModelRoutes, this.http);
+		this.quotas = bindResource(Quotas, this.http);
 		this.models = bindResource(Models, this.http);
 		this.orchestrations = bindResource(Orchestrations, this.http);
 		this.projects = bindResource(Projects, this.http);
@@ -4250,6 +4369,7 @@ var NaturaliClient = class {
 //#endregion
 //#region ../sdk/src/index.ts
 var src_exports = /* @__PURE__ */ __exportAll({
+	Activity: () => Activity,
 	Actors: () => Actors,
 	AgentVersions: () => AgentVersions,
 	Agents: () => Agents,
@@ -4257,6 +4377,7 @@ var src_exports = /* @__PURE__ */ __exportAll({
 	ApiKeys: () => ApiKeys,
 	Approvals: () => Approvals,
 	Assistant: () => Assistant,
+	AuditLog: () => AuditLog,
 	Auth: () => Auth,
 	Channels: () => Channels,
 	Conversations: () => Conversations,
@@ -4276,6 +4397,7 @@ var src_exports = /* @__PURE__ */ __exportAll({
 	NaturaliClient: () => NaturaliClient,
 	Orchestrations: () => Orchestrations,
 	Projects: () => Projects,
+	Quotas: () => Quotas,
 	Secrets: () => Secrets,
 	Sessions: () => Sessions,
 	Tasks: () => Tasks,
@@ -4653,6 +4775,57 @@ const dispatchCommand = async (args) => {
 //#endregion
 //#region src/generated/routes.ts
 const routes = {
+	"list-activity": {
+		serviceClass: "Activity",
+		operationId: "listActivity",
+		description: "Returns activity entries for a project, newest first, filterable by kind and severity. Paginated with an opaque cursor rather than offset/limit — pass the previous page's `next_cursor` to fetch the next one; a `null` `next_cursor` means there is no more data.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/activity",
+		httpMethod: "get",
+		pathParams: ["project_id"],
+		queryParams: [
+			"kind",
+			"severity",
+			"cursor",
+			"limit"
+		],
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "kind",
+				"description": "Filter by activity kind",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "severity",
+				"description": "Filter by severity",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "cursor",
+				"description": "Opaque cursor from a previous page's `next_cursor`",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "limit",
+				"description": "Maximum number of results to return",
+				"required": false,
+				"type": "integer",
+				"in": "query"
+			}
+		]
+	},
 	"list-actors": {
 		serviceClass: "Actors",
 		operationId: "listActors",
@@ -6776,6 +6949,178 @@ const routes = {
 			"in": "body"
 		}]
 	},
+	"list-audit-entries": {
+		serviceClass: "AuditLog",
+		operationId: "listAuditEntries",
+		description: "Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `srn:{project}:secret:` matches every secret action); every other filter is exact.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/audit-log",
+		httpMethod: "get",
+		pathParams: ["project_id"],
+		queryParams: [
+			"action",
+			"principal_id",
+			"resource_public_id",
+			"resource_srn",
+			"from",
+			"to",
+			"limit",
+			"offset"
+		],
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "action",
+				"description": "Exact permission-action string, e.g. `secrets:DeleteSecret`",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "principal_id",
+				"description": "Public id of the principal (`user_…` or `key_…`)",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "resource_public_id",
+				"description": "Exact target resource public id, e.g. `sec_…`",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "resource_srn",
+				"description": "SRN prefix match, e.g. `srn:{project}:secret:`. An entry written before an earlier prefix rename keeps its original SRN (the log is append-only), and an `srn:` prefix matches those too, so history stays reachable.",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "from",
+				"description": "Only entries created at or after this timestamp (ISO 8601)",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "to",
+				"description": "Only entries created at or before this timestamp (ISO 8601)",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "limit",
+				"description": "Number of results per page (1–200, default 25)",
+				"required": false,
+				"type": "integer",
+				"in": "query"
+			},
+			{
+				"name": "offset",
+				"description": "Number of results to skip",
+				"required": false,
+				"type": "integer",
+				"in": "query"
+			}
+		]
+	},
+	"export-audit-entries": {
+		serviceClass: "AuditLog",
+		operationId: "exportAuditEntries",
+		description: "Streams a project's audit-log entries as newline-delimited JSON — one entry object per line, oldest first — for archival before the retention window expires, or for shipping into an external system. `project_id` is required: the export is per-project by design. Filters behave exactly as they do on the list endpoint.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/audit-log",
+		httpMethod: "get",
+		pathParams: ["project_id"],
+		queryParams: [
+			"action",
+			"principal_id",
+			"resource_public_id",
+			"resource_srn",
+			"from",
+			"to"
+		],
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "action",
+				"description": "Exact permission-action string, e.g. `secrets:DeleteSecret`",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "principal_id",
+				"description": "Public id of the principal (`user_…` or `key_…`)",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "resource_public_id",
+				"description": "Exact target resource public id, e.g. `sec_…`",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "resource_srn",
+				"description": "SRN prefix match, e.g. `srn:{project}:secret:`. An entry written before an earlier prefix rename keeps its original SRN (the log is append-only), and an `srn:` prefix matches those too, so history stays reachable.",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "from",
+				"description": "Only entries created at or after this timestamp (ISO 8601)",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			},
+			{
+				"name": "to",
+				"description": "Only entries created at or before this timestamp (ISO 8601)",
+				"required": false,
+				"type": "string",
+				"in": "query"
+			}
+		]
+	},
+	"get-audit-entry": {
+		serviceClass: "AuditLog",
+		operationId: "getAuditEntry",
+		description: "Returns a single audit-log entry, including its `detail` payload",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/audit-log",
+		httpMethod: "get",
+		pathParams: ["project_id", "entry_id"],
+		queryParams: [],
+		flags: [{
+			"name": "project_id",
+			"description": "Project public ID (proj_ prefix).",
+			"required": true,
+			"type": "string",
+			"in": "path"
+		}, {
+			"name": "entry_id",
+			"description": "Audit entry ID",
+			"required": true,
+			"type": "string",
+			"in": "path"
+		}]
+	},
 	"request-sign-in-code": {
 		serviceClass: "Auth",
 		operationId: "requestSignInCode",
@@ -12076,6 +12421,181 @@ const routes = {
 			}
 		]
 	},
+	"list-quotas": {
+		serviceClass: "Quotas",
+		operationId: "listQuotas",
+		description: "Returns the quotas defined in a project",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/quotas",
+		httpMethod: "get",
+		pathParams: ["project_id"],
+		queryParams: ["limit", "offset"],
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "limit",
+				"description": "Maximum number of results to return",
+				"required": false,
+				"type": "integer",
+				"in": "query"
+			},
+			{
+				"name": "offset",
+				"description": "Number of results to skip",
+				"required": false,
+				"type": "integer",
+				"in": "query"
+			}
+		]
+	},
+	"create-quota": {
+		serviceClass: "Quotas",
+		operationId: "createQuota",
+		description: "Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/quotas",
+		httpMethod: "post",
+		pathParams: ["project_id"],
+		queryParams: [],
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "scope",
+				"description": "The scope the quota applies to",
+				"required": true,
+				"type": "string",
+				"in": "body"
+			},
+			{
+				"name": "scope_ref",
+				"description": "Public id of the api key / agent / actor the quota applies to. For `api_key` and `agent` scope, NULL means all entities of that scope type in the project. For `actor` scope, NULL means one budget *per* actor — each end user gets their own allowance — rather than a pooled total across all actors.",
+				"required": false,
+				"type": "string",
+				"in": "body"
+			},
+			{
+				"name": "metric",
+				"description": "The metric being capped",
+				"required": true,
+				"type": "string",
+				"in": "body"
+			},
+			{
+				"name": "window",
+				"description": "The window over which the metric is aggregated",
+				"required": true,
+				"type": "string",
+				"in": "body"
+			},
+			{
+				"name": "limit",
+				"description": "The cap. Must be a positive integer for requests/tokens; fractional values are allowed for cost_usd.",
+				"required": true,
+				"type": "number",
+				"in": "body"
+			},
+			{
+				"name": "mode",
+				"description": "enforce blocks with 429 (requests at the middleware, tokens/cost_usd at the pre-generation check); monitor observes without blocking — a breach fires the quota.exceeded webhook and writes a quotas:MonitorBreach audit entry, but the request is let through.",
+				"required": false,
+				"type": "string",
+				"in": "body"
+			}
+		]
+	},
+	"get-quota": {
+		serviceClass: "Quotas",
+		operationId: "getQuota",
+		description: "Returns a specific quota, including current window usage",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/quotas",
+		httpMethod: "get",
+		pathParams: ["project_id", "quota_id"],
+		queryParams: [],
+		flags: [{
+			"name": "project_id",
+			"description": "Project public ID (proj_ prefix).",
+			"required": true,
+			"type": "string",
+			"in": "path"
+		}, {
+			"name": "quota_id",
+			"description": "Quota ID",
+			"required": true,
+			"type": "string",
+			"in": "path"
+		}]
+	},
+	"update-quota": {
+		serviceClass: "Quotas",
+		operationId: "updateQuota",
+		description: "Updates a quota's limit and/or mode. Other fields are immutable.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/quotas",
+		httpMethod: "patch",
+		pathParams: ["project_id", "quota_id"],
+		queryParams: [],
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "quota_id",
+				"description": "Quota ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "limit",
+				"description": "New limit",
+				"required": false,
+				"type": "number",
+				"in": "body"
+			},
+			{
+				"name": "mode",
+				"description": "New mode",
+				"required": false,
+				"type": "string",
+				"in": "body"
+			}
+		]
+	},
+	"delete-quota": {
+		serviceClass: "Quotas",
+		operationId: "deleteQuota",
+		description: "Deletes a quota and drops its window counters",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/quotas",
+		httpMethod: "delete",
+		pathParams: ["project_id", "quota_id"],
+		queryParams: [],
+		flags: [{
+			"name": "project_id",
+			"description": "Project public ID (proj_ prefix).",
+			"required": true,
+			"type": "string",
+			"in": "path"
+		}, {
+			"name": "quota_id",
+			"description": "Quota ID",
+			"required": true,
+			"type": "string",
+			"in": "path"
+		}]
+	},
 	"list-secrets": {
 		serviceClass: "Secrets",
 		operationId: "listSecrets",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturali/cli",
-  "version": "0.74.0",
+  "version": "0.76.0",
   "description": "Command-line interface for the naturali.ai API, generated from its OpenAPI specs",
   "type": "module",
   "bin": {
@@ -30,7 +30,7 @@
     "tsx": "^4.23.1",
     "typescript": "~6.0.3",
     "vitest": "^4.1.10",
-    "@naturali/sdk": "0.74.0"
+    "@naturali/sdk": "0.76.0"
   },
   "scripts": {
     "generate": "tsx scripts/generate.ts",