@soat/cli 0.15.11 → 0.15.12

package/dist/index.mjs

@@ -13,7 +13,7 @@ import { load } from "js-yaml";
 import * as os from "node:os";
 
 //#region package.json
-var version = "0.15.11";
+var version = "0.15.12";
 
 //#endregion
 //#region src/cli-wrappers/wrappers/formations.ts
@@ -1552,6 +1552,86 @@ var routes = {
       "in": "body"
     }]
   },
+  "list-audit-entries": {
+    serviceClass: "AuditLog",
+    operationId: "listAuditEntries",
+    description: "Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `soat:{project}:secret:` matches every secret action); every other filter is exact.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/audit-log",
+    httpMethod: "get",
+    pathParams: [],
+    queryParams: ["project_id", "action", "actor_id", "resource_public_id", "resource_srn", "from", "to", "limit", "offset"],
+    flags: [{
+      "name": "project_id",
+      "description": "Project ID (scopes results; required if not using project key auth for a specific project)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "action",
+      "description": "Exact permission-action string, e.g. `secrets:DeleteSecret`",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "actor_id",
+      "description": "Public id of the principal (`user_…` or `key_…`)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "resource_public_id",
+      "description": "Exact target resource public id, e.g. `sec_…`",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "resource_srn",
+      "description": "SRN prefix match, e.g. `soat:{project}:secret:`",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "from",
+      "description": "Only entries created at or after this timestamp (ISO 8601)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "to",
+      "description": "Only entries created at or before this timestamp (ISO 8601)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "limit",
+      "description": "Number of results per page (1–200, default 25)",
+      "required": false,
+      "type": "integer",
+      "in": "query"
+    }, {
+      "name": "offset",
+      "description": "Number of results to skip",
+      "required": false,
+      "type": "integer",
+      "in": "query"
+    }]
+  },
+  "get-audit-entry": {
+    serviceClass: "AuditLog",
+    operationId: "getAuditEntry",
+    description: "Returns a single audit-log entry, including its `detail` payload",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/audit-log",
+    httpMethod: "get",
+    pathParams: ["entry_id"],
+    queryParams: [],
+    flags: [{
+      "name": "entry_id",
+      "description": "Audit entry ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
   "list-chats": {
     serviceClass: "Chats",
     operationId: "listChats",
@@ -2668,6 +2748,94 @@ var routes = {
       "in": "body"
     }]
   },
+  "list-exceptions": {
+    serviceClass: "Exceptions",
+    operationId: "listExceptions",
+    description: "Returns exception items for a project, filterable by status, severity, and kind.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/exceptions",
+    httpMethod: "get",
+    pathParams: [],
+    queryParams: ["project_id", "status", "severity", "kind"],
+    flags: [{
+      "name": "project_id",
+      "description": "Project ID (required if not using project key auth)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "status",
+      "description": "Filter by triage status",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "severity",
+      "description": "Filter by severity",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "kind",
+      "description": "Filter by how the exception was filed",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }]
+  },
+  "get-exception": {
+    serviceClass: "Exceptions",
+    operationId: "getException",
+    description: "Returns a single exception item with its full detail.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/exceptions",
+    httpMethod: "get",
+    pathParams: ["exception_id"],
+    queryParams: [],
+    flags: [{
+      "name": "exception_id",
+      "description": "Exception item ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
+  "acknowledge-exception": {
+    serviceClass: "Exceptions",
+    operationId: "acknowledgeException",
+    description: "Moves the item to `acknowledged` (\"someone is on it\"), recording who. A no-op that returns the item unchanged when already acknowledged; rejected when already resolved.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/exceptions",
+    httpMethod: "post",
+    pathParams: ["exception_id"],
+    queryParams: [],
+    flags: [{
+      "name": "exception_id",
+      "description": "Exception item ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
+  "resolve-exception": {
+    serviceClass: "Exceptions",
+    operationId: "resolveException",
+    description: "Moves the item to `resolved` (\"fixed\"), recording who and an optional note.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/exceptions",
+    httpMethod: "post",
+    pathParams: ["exception_id"],
+    queryParams: [],
+    flags: [{
+      "name": "exception_id",
+      "description": "Exception item ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "note",
+      "description": "Optional resolution note",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }]
+  },
   "list-files": {
     serviceClass: "Files",
     operationId: "listFiles",
@@ -4126,6 +4294,16 @@ var routes = {
       "in": "body"
     }]
   },
+  "get-queue-stats": {
+    serviceClass: "Orchestrations",
+    operationId: "getQueueStats",
+    description: "Returns a point-in-time snapshot of the orchestration run queue: how many tasks are waiting to be claimed (`queue_depth`), how many are currently claimed with a valid lease (`claimed_tasks`), the age of the oldest waiting task, recent claim-latency percentiles over a rolling in-process window, and a per-project breakdown. Intended for admin/operator policies; guarded by `orchestrations:GetQueueStats`. A project-scoped caller sees only their own projects under `per_project`.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/orchestrations",
+    httpMethod: "get",
+    pathParams: [],
+    queryParams: [],
+    flags: []
+  },
   "get-orchestration": {
     serviceClass: "Orchestrations",
     operationId: "getOrchestration",
@@ -4508,6 +4686,12 @@ var routes = {
       "required": false,
       "type": "array",
       "in": "body"
+    }, {
+      "name": "max_concurrent_runs",
+      "description": "Maximum orchestration runs of this project driven at once. `null` clears the limit (unlimited); otherwise an integer >= 1. Enforced at queue claim time — excess runs stay queued until a slot frees.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "delete-project": {
@@ -4570,6 +4754,134 @@ var routes = {
       "in": "body"
     }]
   },
+  "list-quotas": {
+    serviceClass: "Quotas",
+    operationId: "listQuotas",
+    description: "Returns the quotas defined in a project",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/quotas",
+    httpMethod: "get",
+    pathParams: [],
+    queryParams: ["project_id"],
+    flags: [{
+      "name": "project_id",
+      "description": "Project ID (required if not using project key auth)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }]
+  },
+  "create-quota": {
+    serviceClass: "Quotas",
+    operationId: "createQuota",
+    description: "Creates a project-scoped quota. `scope: agent` with `metric: requests` and `scope: api_key` with `metric: tokens`/`cost_usd` are both rejected with 400 (no attribution exists to enforce them). A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/quotas",
+    httpMethod: "post",
+    pathParams: [],
+    queryParams: [],
+    flags: [{
+      "name": "project_id",
+      "description": "Project ID (required if not using project key auth)",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "scope",
+      "description": "The scope the quota applies to",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "scope_ref",
+      "description": "Public id of the api key / agent the quota applies to. NULL means all entities of that scope type in the project.",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "metric",
+      "description": "The metric being capped",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "window",
+      "description": "The window over which the metric is aggregated",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "limit",
+      "description": "The cap. Must be a positive integer for requests/tokens; fractional values are allowed for cost_usd.",
+      "required": true,
+      "type": "number",
+      "in": "body"
+    }, {
+      "name": "mode",
+      "description": "enforce blocks with 429 (requests at the middleware, tokens/cost_usd at the pre-generation check); monitor is a pass-through no-op until the webhook phase ships.",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }]
+  },
+  "get-quota": {
+    serviceClass: "Quotas",
+    operationId: "getQuota",
+    description: "Returns a specific quota, including current window usage",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/quotas",
+    httpMethod: "get",
+    pathParams: ["quota_id"],
+    queryParams: [],
+    flags: [{
+      "name": "quota_id",
+      "description": "Quota ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
+  "update-quota": {
+    serviceClass: "Quotas",
+    operationId: "updateQuota",
+    description: "Updates a quota's limit and/or mode. Other fields are immutable.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/quotas",
+    httpMethod: "patch",
+    pathParams: ["quota_id"],
+    queryParams: [],
+    flags: [{
+      "name": "quota_id",
+      "description": "Quota ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "limit",
+      "description": "New limit",
+      "required": false,
+      "type": "number",
+      "in": "body"
+    }, {
+      "name": "mode",
+      "description": "New mode",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }]
+  },
+  "delete-quota": {
+    serviceClass: "Quotas",
+    operationId: "deleteQuota",
+    description: "Deletes a quota and drops its window counters",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/quotas",
+    httpMethod: "delete",
+    pathParams: ["quota_id"],
+    queryParams: [],
+    flags: [{
+      "name": "quota_id",
+      "description": "Quota ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
   "list-secrets": {
     serviceClass: "Secrets",
     operationId: "listSecrets",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/cli",
-  "version": "0.15.11",
+  "version": "0.15.12",
   "type": "module",
   "dependencies": {
     "@inquirer/input": "^5.1.2",
@@ -8,7 +8,7 @@
     "@ttoss/logger": "^0.8.19",
     "commander": "^15.0.0",
     "js-yaml": "^5.2.1",
-    "@soat/sdk": "0.15.11"
+    "@soat/sdk": "0.15.12"
   },
   "devDependencies": {
     "@ttoss/config": "^1.37.17",