@naturali/sdk 0.116.0 → 0.118.0

package/dist/index.cjs

@@ -1319,7 +1319,14 @@ var AiProviders = class {
 	/**
 	* Create an AI provider
 	*
-	* Creates a new LLM provider configuration
+	* Creates a new LLM provider configuration.
+	*
+	* A `bedrock` or `vertex` record must carry a credential of its own — a
+	* linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+	* SDK signs with the server's own credentials (the AWS default credential
+	* chain, Google Application Default Credentials), which is refused with
+	* `400 VALIDATION_FAILED` unless the deployment allows it.
+	*
 	*/
 	static createAiProvider(options) {
 		return (options.client ?? client).post({
@@ -1377,7 +1384,7 @@ var AiProviders = class {
 	* Asks the provider which models it can run, using this provider record's own credentials and configuration, and returns provider-native model ids — the same strings `default_model` and an agent's `model` carry.
 	* Which models are reachable is a property of the credential, not of the provider type: a Vertex provider sees only the publisher models its Google Cloud project and location serve, and a Bedrock provider only the foundation models enabled in its region. Reading the list is how a caller avoids pinning a model that fails at generation time.
 	* Not every provider type can answer. `azure` lists deployments an operator named rather than models, and `ollama` lists whatever was pulled onto that host, so both return `400 MODEL_LISTING_UNSUPPORTED`.
-	* Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret when there is one — IAM keys or a Bedrock API key, a Google service-account key — and otherwise fall back to the server environment (the AWS default credential chain, Google Application Default Credentials), so a record with no `secret_id` can still list.
+	* Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret — IAM keys or a Bedrock API key, a Google service-account key. A record with no `secret_id` would fall back to the server's own credentials (the AWS default credential chain, Google Application Default Credentials); it can list only on a deployment that allows a record to use them, and returns `400 AI_PROVIDER_MISCONFIGURED` otherwise.
 	* A Vertex record needs no `config.project` when its secret is a service-account key, since the key file names its own project. A Vertex record in express mode (API key) cannot list at all: the publisher-model listing rejects API keys and needs a credential that asserts a principal, so it returns `400 MODEL_LISTING_UNSUPPORTED`.
 	* The Vertex answer is the publisher catalogue the record's `config.location` region serves. The project behind the credential is billed and quota'd for the call but does not filter the result, so a listed model may still be unavailable to that project at generation time.
 	*
@@ -3359,7 +3366,7 @@ var Orchestrations = class {
 	/**
 	* List orchestration runs
 	*
-	* Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, or by whether the run has a parent at all.
+	* Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, by status, or by whether the run has a parent at all.
 	*
 	* Note when aggregating: a run's `usage` covers its whole subtree, so summing it over a list that contains both a parent and its children counts the children more than once. Pass `nested=false` to sum over runs a caller started.
 	*/
@@ -3574,7 +3581,9 @@ var Quotas = class {
 	/**
 	* Create a quota
 	*
-	* Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.
+	* Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`; `storage_bytes` is valid for `scope: project` only. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A `cost_usd` quota may name one `meter_type` to cap; omitting it caps every priced meter. A duplicate quota (same project, scope, scope_ref, metric, window, meter_type) is rejected with 409.
+	*
+	* `storage_bytes` caps a stored total rather than a windowed one, so it takes `window: current` and every other metric refuses that value (400 either way). It is enforced at the corpus write paths — file upload and create, document create, document ingest and re-ingest, memory-entry create — with `409 QUOTA_STORAGE_EXCEEDED` and no `Retry-After`, since no window reset clears a footprint.
 	*/
 	static createQuota(options) {
 		return (options.client ?? client).post({
@@ -3881,7 +3890,7 @@ var Tasks = class {
 	/**
 	* List tasks
 	*
-	* Lists tasks (the board query). Filter by workflow, state, status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
+	* Lists tasks (the board query). Filter by workflow, state, status, automation status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
 	*/
 	static listTasks(options) {
 		return (options.client ?? client).get({

package/dist/index.d.cts

@@ -3605,7 +3605,7 @@ type WorkflowResourceProperties = {
   } | null;
 };
 /**
- * Creates a quota — a project-scoped cap that blocks (`enforce`) or reports (`monitor`) when a windowed aggregate is exceeded. `requests` quotas are enforced by the request middleware; `tokens`/`cost_usd` quotas at the pre-generation check. Mirrors the quotas REST contract; `scope`, `metric`, and `window` are immutable after creation (only `limit`, `mode`, and `on_unpriced` update).
+ * Creates a quota — a project-scoped cap that blocks (`enforce`) or reports (`monitor`) when a windowed aggregate is exceeded. `requests` quotas are enforced by the request middleware; `tokens`/`cost_usd` quotas at the pre-generation check. Mirrors the quotas REST contract; `scope`, `metric`, `window`, and `meter_type` are immutable after creation (only `limit`, `mode`, and `on_unpriced` update).
  */
 type QuotaResourceProperties = {
   /**
@@ -3619,13 +3619,13 @@ type QuotaResourceProperties = {
   /**
    * The metric being capped
    */
-  metric: 'requests' | 'tokens' | 'cost_usd';
+  metric: 'requests' | 'tokens' | 'cost_usd' | 'storage_bytes';
   /**
-   * The window over which the metric is aggregated
+   * The window over which the metric is aggregated. storage_bytes caps a stored total rather than a windowed one, so it takes current and refuses every other value; current is refused for every other metric.
    */
-  window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month';
+  window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month' | 'current';
   /**
-   * The cap. Positive integer for requests/tokens; fractional allowed for cost_usd.
+   * The cap. Positive integer for requests/tokens/storage_bytes (bytes); fractional allowed for cost_usd.
    */
   limit: number;
   /**
@@ -3636,6 +3636,10 @@ type QuotaResourceProperties = {
    * Only for metric cost_usd. What an enforce quota does over a pricing blackout — block (the default) refuses generations with 409 QUOTA_UNENFORCEABLE, allow accepts the unmeasurable spend. See the quotas REST contract.
    */
   on_unpriced?: 'block' | 'allow';
+  /**
+   * Only for metric cost_usd. The meter this cap answers for; omit it and the cap sums every priced meter. See the quotas REST contract.
+   */
+  meter_type?: 'llm_tokens' | 'compute_execution' | 'api_request' | 'storage';
 };
 /**
  * Creates a guardrail — an action-class document (`class`/`guard`) that gates tool-call autonomy. Attach it to a tool or agent via that resource's `guardrail_ids` (a `{ "ref": … }` to this resource in the same template resolves to its physical id at deploy time). Mirrors the guardrails REST contract; `class`/`default_class`/`guard`/`escalate` are flattened here from the REST API's single `document` object.
@@ -5497,16 +5501,23 @@ type Quota = {
    * Public id of the api key / agent / actor the quota applies to. For `api_key` and `agent` scope, NULL means all entities of that scope type in the project. For `actor` scope, NULL means one budget *per* actor rather than a pooled total across all actors.
    */
   scope_ref?: string | null;
-  metric?: 'requests' | 'tokens' | 'cost_usd';
-  window?: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month';
+  metric?: 'requests' | 'tokens' | 'cost_usd' | 'storage_bytes';
+  /**
+   * The window the metric is aggregated over; `current` on storage_bytes, which caps a stored total and never resets.
+   */
+  window?: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month' | 'current';
   limit?: number;
   mode?: 'enforce' | 'monitor';
+  /**
+   * The meter a cost_usd cap answers for. Null is every priced meter, which is what a quota created without one carries.
+   */
+  meter_type?: 'llm_tokens' | 'compute_execution' | 'api_request' | 'storage' | null;
   /**
    * Pricing posture of a cost_usd quota over an unpriced blackout — block refuses generations, allow lets them through (the quota_unpriced exception is filed either way, and for a partly priced window, which no posture refuses). Null for metrics with no pricing dependency.
    */
   on_unpriced?: 'block' | 'allow' | null;
   /**
-   * Current fixed-window usage for the requests metric. Null for token/cost quotas (which aggregate the usage meter at check time rather than keeping a counter) and in list responses.
+   * Current fixed-window usage for the requests metric. Null for token/cost quotas (which aggregate the usage meter at check time rather than keeping a counter), null for storage_bytes (a stored total has no window and no counter — read the footprint from the storage meter), and null in list responses.
    */
   current_usage?: {
     window_key?: string;
@@ -8322,7 +8333,7 @@ type CreateAiProviderData = {
      */
     default_model: string;
     /**
-     * Secret ID containing API credentials
+     * Secret ID containing API credentials. Required for `bedrock` and `vertex` unless `config.apiKey` carries one.
      */
     secret_id?: string;
     /**
@@ -10976,6 +10987,10 @@ type CreateDocumentErrors = {
    * Forbidden
    */
   403: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
 };
 type CreateDocumentError = CreateDocumentErrors[keyof CreateDocumentErrors];
 type CreateDocumentResponses = {
@@ -11042,7 +11057,7 @@ type IngestDocumentErrors = {
    */
   403: ErrorResponse;
   /**
-   * The file already backs a Document (a file can only be ingested once). Use `POST /documents/{document_id}/ingest` to re-process the existing document, or upload a new copy of the file to ingest it separately.
+   * The file already backs a Document (a file can only be ingested once — use `POST /documents/{document_id}/ingest` to re-process the existing document, or upload a new copy of the file to ingest it separately), or the project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`; delete stored content or raise the quota — no `Retry-After` is sent, since no window reset clears a stored total).
    */
   409: ErrorResponse;
   /**
@@ -11281,6 +11296,10 @@ type ReingestDocumentErrors = {
    * Document not found
    */
   404: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
   /**
    * The file is too large to re-ingest synchronously (`?wait=true`). Retry in background mode.
    */
@@ -11773,6 +11792,10 @@ type CreateDatasetItemErrors = {
    * Dataset not found
    */
   404: unknown;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). A fixture is a corpus write like a document, so it is bounded by the same cap; delete stored content or raise the quota — no `Retry-After` is sent, since no window reset clears a stored total.
+   */
+  409: unknown;
 };
 type CreateDatasetItemResponses = {
   /**
@@ -11829,7 +11852,7 @@ type CreateDatasetItemFromGenerationErrors = {
    */
   404: unknown;
   /**
-   * The generation has not completed, or its content was never stored or has been purged
+   * The generation has not completed, its content was never stored or has been purged, or the project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`; delete stored content or raise the quota — no `Retry-After` is sent, since no window reset clears a stored total)
    */
   409: unknown;
 };
@@ -12674,6 +12697,10 @@ type CreateFileData = {
   url: '/v1/projects/{project_id}/files';
 };
 type CreateFileErrors = {
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
   /**
    * Internal server error
    */
@@ -12733,6 +12760,10 @@ type UploadFileErrors = {
    *
    */
   403: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
 };
 type UploadFileError = UploadFileErrors[keyof UploadFileErrors];
 type UploadFileResponses = {
@@ -12767,6 +12798,10 @@ type UploadFileBase64Errors = {
    *
    */
   403: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
 };
 type UploadFileBase64Error = UploadFileBase64Errors[keyof UploadFileBase64Errors];
 type UploadFileBase64Responses = {
@@ -14715,6 +14750,10 @@ type CreateMemoryEntryErrors = {
    * Memory not found
    */
   404: unknown;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: unknown;
   /**
    * Internal server error
    */
@@ -15570,6 +15609,12 @@ type ListOrchestrationRunsData = {
      * Contradicting `parent_orchestration_run_id` with `nested=false` is a `400`; any value other than `true` or `false` is a `400`.
      */
     nested?: boolean;
+    /**
+     * Filter by run status. Repeat the parameter to OR values — `status=queued&status=running&status=sleeping&status=awaiting_input` is the set still driving, which is how a caller finds live work without paging every run the project ever started.
+     *
+     * There is no `non_terminal` shorthand on purpose: which statuses count as live is the caller's policy. A value outside the enum, empty string included, is a `400`.
+     */
+    status?: Array<'queued' | 'running' | 'sleeping' | 'awaiting_input' | 'succeeded' | 'failed' | 'cancelled' | 'expired'>;
     /**
      * Maximum number of results to return
      */
@@ -16169,13 +16214,13 @@ type CreateQuotaData = {
     /**
      * The metric being capped
      */
-    metric: 'requests' | 'tokens' | 'cost_usd';
+    metric: 'requests' | 'tokens' | 'cost_usd' | 'storage_bytes';
     /**
-     * The window over which the metric is aggregated
+     * The window over which the metric is aggregated. `current` is the only accepted value for storage_bytes (a stored total is not aggregated over time) and is refused for every other metric.
      */
-    window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month';
+    window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month' | 'current';
     /**
-     * The cap. Must be a positive integer for requests/tokens; fractional values are allowed for cost_usd.
+     * The cap. Must be a positive integer for requests/tokens/storage_bytes (bytes); fractional values are allowed for cost_usd.
      */
     limit: number;
     /**
@@ -16186,6 +16231,10 @@ type CreateQuotaData = {
      * Only for metric cost_usd (400 on any other metric). What an enforce quota does when the current window is a pricing blackout — several metered llm_tokens events, none of them priced, so the aggregate is 0 however much was actually spent. Platform meters such as compute_execution are read for the aggregate but never for this verdict. block (the default) refuses new generations with 409 QUOTA_UNENFORCEABLE until pricing is configured; allow accepts the unmeasurable spend explicitly. Either way a quota_unpriced exception is filed. monitor-mode quotas never block regardless. A partly priced window is not a blackout: no posture refuses it, it is enforced on its priced total, and it files the same exception.
      */
     on_unpriced?: 'block' | 'allow';
+    /**
+     * Only for metric cost_usd (400 on any other metric). The meter this cap answers for. Omit it and the cap sums every priced meter, which is the existing behaviour; name one and only that meter's cost counts, so an AI spend cap is not consumed by platform meters the operator prices (and vice versa). Part of the quota's identity, so two meter scopes can share a scope/metric/window and neither conflicts with an unscoped cap. Immutable after creation — replace the quota to change it.
+     */
+    meter_type?: 'llm_tokens' | 'compute_execution' | 'api_request' | 'storage';
   };
   path: {
     /**
@@ -17163,6 +17212,12 @@ type ListTasksData = {
     workflow_id?: string;
     state?: string;
     status?: 'open' | 'closed';
+    /**
+     * Filter by the current state's dispatch status. Repeat the parameter to OR values. `none` selects the tasks whose `automation_status` is `null` — the ones that never entered a state with an automation. It is a value a task really holds, so it is a value of the filter too; the parameter's own absence already means "every task".
+     *
+     * A value outside the enum, empty string included, is a `400`.
+     */
+    automation_status?: Array<'running' | 'completed' | 'failed' | 'unrouted' | 'paused' | 'none'>;
     assignee?: string;
     /**
      * Maximum number of results to return
@@ -19362,7 +19417,14 @@ declare class AiProviders {
   /**
    * Create an AI provider
    *
-   * Creates a new LLM provider configuration
+   * Creates a new LLM provider configuration.
+   *
+   * A `bedrock` or `vertex` record must carry a credential of its own — a
+   * linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+   * SDK signs with the server's own credentials (the AWS default credential
+   * chain, Google Application Default Credentials), which is refused with
+   * `400 VALIDATION_FAILED` unless the deployment allows it.
+   *
    */
   static createAiProvider<ThrowOnError extends boolean = false>(options: Options<CreateAiProviderData, ThrowOnError>): RequestResult<CreateAiProviderResponses, CreateAiProviderErrors, ThrowOnError>;
   /**
@@ -19392,7 +19454,7 @@ declare class AiProviders {
    * Asks the provider which models it can run, using this provider record's own credentials and configuration, and returns provider-native model ids — the same strings `default_model` and an agent's `model` carry.
    * Which models are reachable is a property of the credential, not of the provider type: a Vertex provider sees only the publisher models its Google Cloud project and location serve, and a Bedrock provider only the foundation models enabled in its region. Reading the list is how a caller avoids pinning a model that fails at generation time.
    * Not every provider type can answer. `azure` lists deployments an operator named rather than models, and `ollama` lists whatever was pulled onto that host, so both return `400 MODEL_LISTING_UNSUPPORTED`.
-   * Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret when there is one — IAM keys or a Bedrock API key, a Google service-account key — and otherwise fall back to the server environment (the AWS default credential chain, Google Application Default Credentials), so a record with no `secret_id` can still list.
+   * Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret — IAM keys or a Bedrock API key, a Google service-account key. A record with no `secret_id` would fall back to the server's own credentials (the AWS default credential chain, Google Application Default Credentials); it can list only on a deployment that allows a record to use them, and returns `400 AI_PROVIDER_MISCONFIGURED` otherwise.
    * A Vertex record needs no `config.project` when its secret is a service-account key, since the key file names its own project. A Vertex record in express mode (API key) cannot list at all: the publisher-model listing rejects API keys and needs a credential that asserts a principal, so it returns `400 MODEL_LISTING_UNSUPPORTED`.
    * The Vertex answer is the publisher catalogue the record's `config.location` region serves. The project behind the credential is billed and quota'd for the call but does not filter the result, so a listed model may still be unavailable to that project at generation time.
    *
@@ -20419,7 +20481,7 @@ declare class Orchestrations {
   /**
    * List orchestration runs
    *
-   * Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, or by whether the run has a parent at all.
+   * Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, by status, or by whether the run has a parent at all.
    *
    * Note when aggregating: a run's `usage` covers its whole subtree, so summing it over a list that contains both a parent and its children counts the children more than once. Pass `nested=false` to sum over runs a caller started.
    */
@@ -20539,7 +20601,9 @@ declare class Quotas {
   /**
    * Create a quota
    *
-   * Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.
+   * Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`; `storage_bytes` is valid for `scope: project` only. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A `cost_usd` quota may name one `meter_type` to cap; omitting it caps every priced meter. A duplicate quota (same project, scope, scope_ref, metric, window, meter_type) is rejected with 409.
+   *
+   * `storage_bytes` caps a stored total rather than a windowed one, so it takes `window: current` and every other metric refuses that value (400 either way). It is enforced at the corpus write paths — file upload and create, document create, document ingest and re-ingest, memory-entry create — with `409 QUOTA_STORAGE_EXCEEDED` and no `Retry-After`, since no window reset clears a footprint.
    */
   static createQuota<ThrowOnError extends boolean = false>(options: Options<CreateQuotaData, ThrowOnError>): RequestResult<CreateQuotaResponses, CreateQuotaErrors, ThrowOnError>;
   /**
@@ -20688,7 +20752,7 @@ declare class Tasks {
   /**
    * List tasks
    *
-   * Lists tasks (the board query). Filter by workflow, state, status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
+   * Lists tasks (the board query). Filter by workflow, state, status, automation status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
    */
   static listTasks<ThrowOnError extends boolean = false>(options: Options<ListTasksData, ThrowOnError>): RequestResult<ListTasksResponses, ListTasksErrors, ThrowOnError>;
   /**

package/dist/index.d.mts

@@ -3605,7 +3605,7 @@ type WorkflowResourceProperties = {
   } | null;
 };
 /**
- * Creates a quota — a project-scoped cap that blocks (`enforce`) or reports (`monitor`) when a windowed aggregate is exceeded. `requests` quotas are enforced by the request middleware; `tokens`/`cost_usd` quotas at the pre-generation check. Mirrors the quotas REST contract; `scope`, `metric`, and `window` are immutable after creation (only `limit`, `mode`, and `on_unpriced` update).
+ * Creates a quota — a project-scoped cap that blocks (`enforce`) or reports (`monitor`) when a windowed aggregate is exceeded. `requests` quotas are enforced by the request middleware; `tokens`/`cost_usd` quotas at the pre-generation check. Mirrors the quotas REST contract; `scope`, `metric`, `window`, and `meter_type` are immutable after creation (only `limit`, `mode`, and `on_unpriced` update).
  */
 type QuotaResourceProperties = {
   /**
@@ -3619,13 +3619,13 @@ type QuotaResourceProperties = {
   /**
    * The metric being capped
    */
-  metric: 'requests' | 'tokens' | 'cost_usd';
+  metric: 'requests' | 'tokens' | 'cost_usd' | 'storage_bytes';
   /**
-   * The window over which the metric is aggregated
+   * The window over which the metric is aggregated. storage_bytes caps a stored total rather than a windowed one, so it takes current and refuses every other value; current is refused for every other metric.
    */
-  window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month';
+  window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month' | 'current';
   /**
-   * The cap. Positive integer for requests/tokens; fractional allowed for cost_usd.
+   * The cap. Positive integer for requests/tokens/storage_bytes (bytes); fractional allowed for cost_usd.
    */
   limit: number;
   /**
@@ -3636,6 +3636,10 @@ type QuotaResourceProperties = {
    * Only for metric cost_usd. What an enforce quota does over a pricing blackout — block (the default) refuses generations with 409 QUOTA_UNENFORCEABLE, allow accepts the unmeasurable spend. See the quotas REST contract.
    */
   on_unpriced?: 'block' | 'allow';
+  /**
+   * Only for metric cost_usd. The meter this cap answers for; omit it and the cap sums every priced meter. See the quotas REST contract.
+   */
+  meter_type?: 'llm_tokens' | 'compute_execution' | 'api_request' | 'storage';
 };
 /**
  * Creates a guardrail — an action-class document (`class`/`guard`) that gates tool-call autonomy. Attach it to a tool or agent via that resource's `guardrail_ids` (a `{ "ref": … }` to this resource in the same template resolves to its physical id at deploy time). Mirrors the guardrails REST contract; `class`/`default_class`/`guard`/`escalate` are flattened here from the REST API's single `document` object.
@@ -5497,16 +5501,23 @@ type Quota = {
    * Public id of the api key / agent / actor the quota applies to. For `api_key` and `agent` scope, NULL means all entities of that scope type in the project. For `actor` scope, NULL means one budget *per* actor rather than a pooled total across all actors.
    */
   scope_ref?: string | null;
-  metric?: 'requests' | 'tokens' | 'cost_usd';
-  window?: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month';
+  metric?: 'requests' | 'tokens' | 'cost_usd' | 'storage_bytes';
+  /**
+   * The window the metric is aggregated over; `current` on storage_bytes, which caps a stored total and never resets.
+   */
+  window?: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month' | 'current';
   limit?: number;
   mode?: 'enforce' | 'monitor';
+  /**
+   * The meter a cost_usd cap answers for. Null is every priced meter, which is what a quota created without one carries.
+   */
+  meter_type?: 'llm_tokens' | 'compute_execution' | 'api_request' | 'storage' | null;
   /**
    * Pricing posture of a cost_usd quota over an unpriced blackout — block refuses generations, allow lets them through (the quota_unpriced exception is filed either way, and for a partly priced window, which no posture refuses). Null for metrics with no pricing dependency.
    */
   on_unpriced?: 'block' | 'allow' | null;
   /**
-   * Current fixed-window usage for the requests metric. Null for token/cost quotas (which aggregate the usage meter at check time rather than keeping a counter) and in list responses.
+   * Current fixed-window usage for the requests metric. Null for token/cost quotas (which aggregate the usage meter at check time rather than keeping a counter), null for storage_bytes (a stored total has no window and no counter — read the footprint from the storage meter), and null in list responses.
    */
   current_usage?: {
     window_key?: string;
@@ -8322,7 +8333,7 @@ type CreateAiProviderData = {
      */
     default_model: string;
     /**
-     * Secret ID containing API credentials
+     * Secret ID containing API credentials. Required for `bedrock` and `vertex` unless `config.apiKey` carries one.
      */
     secret_id?: string;
     /**
@@ -10976,6 +10987,10 @@ type CreateDocumentErrors = {
    * Forbidden
    */
   403: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
 };
 type CreateDocumentError = CreateDocumentErrors[keyof CreateDocumentErrors];
 type CreateDocumentResponses = {
@@ -11042,7 +11057,7 @@ type IngestDocumentErrors = {
    */
   403: ErrorResponse;
   /**
-   * The file already backs a Document (a file can only be ingested once). Use `POST /documents/{document_id}/ingest` to re-process the existing document, or upload a new copy of the file to ingest it separately.
+   * The file already backs a Document (a file can only be ingested once — use `POST /documents/{document_id}/ingest` to re-process the existing document, or upload a new copy of the file to ingest it separately), or the project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`; delete stored content or raise the quota — no `Retry-After` is sent, since no window reset clears a stored total).
    */
   409: ErrorResponse;
   /**
@@ -11281,6 +11296,10 @@ type ReingestDocumentErrors = {
    * Document not found
    */
   404: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
   /**
    * The file is too large to re-ingest synchronously (`?wait=true`). Retry in background mode.
    */
@@ -11773,6 +11792,10 @@ type CreateDatasetItemErrors = {
    * Dataset not found
    */
   404: unknown;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). A fixture is a corpus write like a document, so it is bounded by the same cap; delete stored content or raise the quota — no `Retry-After` is sent, since no window reset clears a stored total.
+   */
+  409: unknown;
 };
 type CreateDatasetItemResponses = {
   /**
@@ -11829,7 +11852,7 @@ type CreateDatasetItemFromGenerationErrors = {
    */
   404: unknown;
   /**
-   * The generation has not completed, or its content was never stored or has been purged
+   * The generation has not completed, its content was never stored or has been purged, or the project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`; delete stored content or raise the quota — no `Retry-After` is sent, since no window reset clears a stored total)
    */
   409: unknown;
 };
@@ -12674,6 +12697,10 @@ type CreateFileData = {
   url: '/v1/projects/{project_id}/files';
 };
 type CreateFileErrors = {
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
   /**
    * Internal server error
    */
@@ -12733,6 +12760,10 @@ type UploadFileErrors = {
    *
    */
   403: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
 };
 type UploadFileError = UploadFileErrors[keyof UploadFileErrors];
 type UploadFileResponses = {
@@ -12767,6 +12798,10 @@ type UploadFileBase64Errors = {
    *
    */
   403: ErrorResponse;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: ErrorResponse;
 };
 type UploadFileBase64Error = UploadFileBase64Errors[keyof UploadFileBase64Errors];
 type UploadFileBase64Responses = {
@@ -14715,6 +14750,10 @@ type CreateMemoryEntryErrors = {
    * Memory not found
    */
   404: unknown;
+  /**
+   * The project's `storage_bytes` quota is exceeded (`QUOTA_STORAGE_EXCEEDED`). Delete stored content, or raise the quota — no window reset clears a stored total, so no `Retry-After` is sent.
+   */
+  409: unknown;
   /**
    * Internal server error
    */
@@ -15570,6 +15609,12 @@ type ListOrchestrationRunsData = {
      * Contradicting `parent_orchestration_run_id` with `nested=false` is a `400`; any value other than `true` or `false` is a `400`.
      */
     nested?: boolean;
+    /**
+     * Filter by run status. Repeat the parameter to OR values — `status=queued&status=running&status=sleeping&status=awaiting_input` is the set still driving, which is how a caller finds live work without paging every run the project ever started.
+     *
+     * There is no `non_terminal` shorthand on purpose: which statuses count as live is the caller's policy. A value outside the enum, empty string included, is a `400`.
+     */
+    status?: Array<'queued' | 'running' | 'sleeping' | 'awaiting_input' | 'succeeded' | 'failed' | 'cancelled' | 'expired'>;
     /**
      * Maximum number of results to return
      */
@@ -16169,13 +16214,13 @@ type CreateQuotaData = {
     /**
      * The metric being capped
      */
-    metric: 'requests' | 'tokens' | 'cost_usd';
+    metric: 'requests' | 'tokens' | 'cost_usd' | 'storage_bytes';
     /**
-     * The window over which the metric is aggregated
+     * The window over which the metric is aggregated. `current` is the only accepted value for storage_bytes (a stored total is not aggregated over time) and is refused for every other metric.
      */
-    window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month';
+    window: 'rolling_1m' | 'rolling_1h' | 'rolling_24h' | 'calendar_month' | 'current';
     /**
-     * The cap. Must be a positive integer for requests/tokens; fractional values are allowed for cost_usd.
+     * The cap. Must be a positive integer for requests/tokens/storage_bytes (bytes); fractional values are allowed for cost_usd.
      */
     limit: number;
     /**
@@ -16186,6 +16231,10 @@ type CreateQuotaData = {
      * Only for metric cost_usd (400 on any other metric). What an enforce quota does when the current window is a pricing blackout — several metered llm_tokens events, none of them priced, so the aggregate is 0 however much was actually spent. Platform meters such as compute_execution are read for the aggregate but never for this verdict. block (the default) refuses new generations with 409 QUOTA_UNENFORCEABLE until pricing is configured; allow accepts the unmeasurable spend explicitly. Either way a quota_unpriced exception is filed. monitor-mode quotas never block regardless. A partly priced window is not a blackout: no posture refuses it, it is enforced on its priced total, and it files the same exception.
      */
     on_unpriced?: 'block' | 'allow';
+    /**
+     * Only for metric cost_usd (400 on any other metric). The meter this cap answers for. Omit it and the cap sums every priced meter, which is the existing behaviour; name one and only that meter's cost counts, so an AI spend cap is not consumed by platform meters the operator prices (and vice versa). Part of the quota's identity, so two meter scopes can share a scope/metric/window and neither conflicts with an unscoped cap. Immutable after creation — replace the quota to change it.
+     */
+    meter_type?: 'llm_tokens' | 'compute_execution' | 'api_request' | 'storage';
   };
   path: {
     /**
@@ -17163,6 +17212,12 @@ type ListTasksData = {
     workflow_id?: string;
     state?: string;
     status?: 'open' | 'closed';
+    /**
+     * Filter by the current state's dispatch status. Repeat the parameter to OR values. `none` selects the tasks whose `automation_status` is `null` — the ones that never entered a state with an automation. It is a value a task really holds, so it is a value of the filter too; the parameter's own absence already means "every task".
+     *
+     * A value outside the enum, empty string included, is a `400`.
+     */
+    automation_status?: Array<'running' | 'completed' | 'failed' | 'unrouted' | 'paused' | 'none'>;
     assignee?: string;
     /**
      * Maximum number of results to return
@@ -19362,7 +19417,14 @@ declare class AiProviders {
   /**
    * Create an AI provider
    *
-   * Creates a new LLM provider configuration
+   * Creates a new LLM provider configuration.
+   *
+   * A `bedrock` or `vertex` record must carry a credential of its own — a
+   * linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+   * SDK signs with the server's own credentials (the AWS default credential
+   * chain, Google Application Default Credentials), which is refused with
+   * `400 VALIDATION_FAILED` unless the deployment allows it.
+   *
    */
   static createAiProvider<ThrowOnError extends boolean = false>(options: Options<CreateAiProviderData, ThrowOnError>): RequestResult<CreateAiProviderResponses, CreateAiProviderErrors, ThrowOnError>;
   /**
@@ -19392,7 +19454,7 @@ declare class AiProviders {
    * Asks the provider which models it can run, using this provider record's own credentials and configuration, and returns provider-native model ids — the same strings `default_model` and an agent's `model` carry.
    * Which models are reachable is a property of the credential, not of the provider type: a Vertex provider sees only the publisher models its Google Cloud project and location serve, and a Bedrock provider only the foundation models enabled in its region. Reading the list is how a caller avoids pinning a model that fails at generation time.
    * Not every provider type can answer. `azure` lists deployments an operator named rather than models, and `ollama` lists whatever was pulled onto that host, so both return `400 MODEL_LISTING_UNSUPPORTED`.
-   * Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret when there is one — IAM keys or a Bedrock API key, a Google service-account key — and otherwise fall back to the server environment (the AWS default credential chain, Google Application Default Credentials), so a record with no `secret_id` can still list.
+   * Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret — IAM keys or a Bedrock API key, a Google service-account key. A record with no `secret_id` would fall back to the server's own credentials (the AWS default credential chain, Google Application Default Credentials); it can list only on a deployment that allows a record to use them, and returns `400 AI_PROVIDER_MISCONFIGURED` otherwise.
    * A Vertex record needs no `config.project` when its secret is a service-account key, since the key file names its own project. A Vertex record in express mode (API key) cannot list at all: the publisher-model listing rejects API keys and needs a credential that asserts a principal, so it returns `400 MODEL_LISTING_UNSUPPORTED`.
    * The Vertex answer is the publisher catalogue the record's `config.location` region serves. The project behind the credential is billed and quota'd for the call but does not filter the result, so a listed model may still be unavailable to that project at generation time.
    *
@@ -20419,7 +20481,7 @@ declare class Orchestrations {
   /**
    * List orchestration runs
    *
-   * Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, or by whether the run has a parent at all.
+   * Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, by status, or by whether the run has a parent at all.
    *
    * Note when aggregating: a run's `usage` covers its whole subtree, so summing it over a list that contains both a parent and its children counts the children more than once. Pass `nested=false` to sum over runs a caller started.
    */
@@ -20539,7 +20601,9 @@ declare class Quotas {
   /**
    * Create a quota
    *
-   * Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.
+   * Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`; `storage_bytes` is valid for `scope: project` only. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A `cost_usd` quota may name one `meter_type` to cap; omitting it caps every priced meter. A duplicate quota (same project, scope, scope_ref, metric, window, meter_type) is rejected with 409.
+   *
+   * `storage_bytes` caps a stored total rather than a windowed one, so it takes `window: current` and every other metric refuses that value (400 either way). It is enforced at the corpus write paths — file upload and create, document create, document ingest and re-ingest, memory-entry create — with `409 QUOTA_STORAGE_EXCEEDED` and no `Retry-After`, since no window reset clears a footprint.
    */
   static createQuota<ThrowOnError extends boolean = false>(options: Options<CreateQuotaData, ThrowOnError>): RequestResult<CreateQuotaResponses, CreateQuotaErrors, ThrowOnError>;
   /**
@@ -20688,7 +20752,7 @@ declare class Tasks {
   /**
    * List tasks
    *
-   * Lists tasks (the board query). Filter by workflow, state, status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
+   * Lists tasks (the board query). Filter by workflow, state, status, automation status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
    */
   static listTasks<ThrowOnError extends boolean = false>(options: Options<ListTasksData, ThrowOnError>): RequestResult<ListTasksResponses, ListTasksErrors, ThrowOnError>;
   /**

package/dist/index.mjs

@@ -1318,7 +1318,14 @@ var AiProviders = class {
 	/**
 	* Create an AI provider
 	*
-	* Creates a new LLM provider configuration
+	* Creates a new LLM provider configuration.
+	*
+	* A `bedrock` or `vertex` record must carry a credential of its own — a
+	* linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+	* SDK signs with the server's own credentials (the AWS default credential
+	* chain, Google Application Default Credentials), which is refused with
+	* `400 VALIDATION_FAILED` unless the deployment allows it.
+	*
 	*/
 	static createAiProvider(options) {
 		return (options.client ?? client).post({
@@ -1376,7 +1383,7 @@ var AiProviders = class {
 	* Asks the provider which models it can run, using this provider record's own credentials and configuration, and returns provider-native model ids — the same strings `default_model` and an agent's `model` carry.
 	* Which models are reachable is a property of the credential, not of the provider type: a Vertex provider sees only the publisher models its Google Cloud project and location serve, and a Bedrock provider only the foundation models enabled in its region. Reading the list is how a caller avoids pinning a model that fails at generation time.
 	* Not every provider type can answer. `azure` lists deployments an operator named rather than models, and `ollama` lists whatever was pulled onto that host, so both return `400 MODEL_LISTING_UNSUPPORTED`.
-	* Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret when there is one — IAM keys or a Bedrock API key, a Google service-account key — and otherwise fall back to the server environment (the AWS default credential chain, Google Application Default Credentials), so a record with no `secret_id` can still list.
+	* Listing resolves credentials the same way generation does, so a record that can generate can list. The API-key types (`openai`, `groq`, `xai`, `gateway`, `custom`, `anthropic`, `google`) use the record's linked secret and cannot list without one. `bedrock` and `vertex` use the linked secret — IAM keys or a Bedrock API key, a Google service-account key. A record with no `secret_id` would fall back to the server's own credentials (the AWS default credential chain, Google Application Default Credentials); it can list only on a deployment that allows a record to use them, and returns `400 AI_PROVIDER_MISCONFIGURED` otherwise.
 	* A Vertex record needs no `config.project` when its secret is a service-account key, since the key file names its own project. A Vertex record in express mode (API key) cannot list at all: the publisher-model listing rejects API keys and needs a credential that asserts a principal, so it returns `400 MODEL_LISTING_UNSUPPORTED`.
 	* The Vertex answer is the publisher catalogue the record's `config.location` region serves. The project behind the credential is billed and quota'd for the call but does not filter the result, so a listed model may still be unavailable to that project at generation time.
 	*
@@ -3358,7 +3365,7 @@ var Orchestrations = class {
 	/**
 	* List orchestration runs
 	*
-	* Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, or by whether the run has a parent at all.
+	* Returns orchestration runs the caller can access, optionally filtered by orchestration, by parent run, by status, or by whether the run has a parent at all.
 	*
 	* Note when aggregating: a run's `usage` covers its whole subtree, so summing it over a list that contains both a parent and its children counts the children more than once. Pass `nested=false` to sum over runs a caller started.
 	*/
@@ -3573,7 +3580,9 @@ var Quotas = class {
 	/**
 	* Create a quota
 	*
-	* Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.
+	* Creates a project-scoped quota. `requests` is valid for `scope: project`/`api_key`; `tokens` and `cost_usd` are valid for `scope: project`/`agent`/`actor`; `storage_bytes` is valid for `scope: project` only. Any other scope/metric pair is rejected with 400 (no attribution exists to enforce it). An `actor` quota caps one end user's spend, matched from the generation's session; a null `scope_ref` means one budget *per* actor rather than a pooled project total. A `cost_usd` quota may name one `meter_type` to cap; omitting it caps every priced meter. A duplicate quota (same project, scope, scope_ref, metric, window, meter_type) is rejected with 409.
+	*
+	* `storage_bytes` caps a stored total rather than a windowed one, so it takes `window: current` and every other metric refuses that value (400 either way). It is enforced at the corpus write paths — file upload and create, document create, document ingest and re-ingest, memory-entry create — with `409 QUOTA_STORAGE_EXCEEDED` and no `Retry-After`, since no window reset clears a footprint.
 	*/
 	static createQuota(options) {
 		return (options.client ?? client).post({
@@ -3880,7 +3889,7 @@ var Tasks = class {
 	/**
 	* List tasks
 	*
-	* Lists tasks (the board query). Filter by workflow, state, status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
+	* Lists tasks (the board query). Filter by workflow, state, status, automation status, or assignee — `GET /tasks?workflow_id=...&state=...` is one board column.
 	*/
 	static listTasks(options) {
 		return (options.client ?? client).get({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturali/sdk",
-  "version": "0.116.0",
+  "version": "0.118.0",
   "description": "TypeScript SDK for the naturali.ai API, generated from its OpenAPI specs",
   "type": "module",
   "sideEffects": false,
@@ -37,7 +37,7 @@
     "tsx": "^4.23.1",
     "typescript": "~6.0.3",
     "vitest": "^4.1.10",
-    "@naturali/api": "0.116.0"
+    "@naturali/api": "0.118.0"
   },
   "scripts": {
     "generate": "tsx scripts/generate.ts",