@soat/sdk 0.15.10 → 0.15.12

package/dist/index.cjs

@@ -1063,6 +1063,30 @@ var Approvals = class {
 		});
 	}
 };
+var AuditLog = class {
+	/**
+	* List audit entries
+	*
+	* Returns audit-log entries visible to the caller, newest first. All filters are optional and combine with AND. `resource_srn` is a prefix match (e.g. `soat:{project}:secret:` matches every secret action); every other filter is exact.
+	*/
+	static listAuditEntries(options) {
+		return (options?.client ?? client).get({
+			url: "/api/v1/audit-log",
+			...options
+		});
+	}
+	/**
+	* Get an audit entry
+	*
+	* Returns a single audit-log entry, including its `detail` payload
+	*/
+	static getAuditEntry(options) {
+		return (options.client ?? client).get({
+			url: "/api/v1/audit-log/{entry_id}",
+			...options
+		});
+	}
+};
 var Chats = class {
 	/**
 	* List chats
@@ -1618,6 +1642,56 @@ var Embeddings = class {
 		});
 	}
 };
+var Exceptions = class {
+	/**
+	* List exception items
+	*
+	* Returns exception items for a project, filterable by status, severity, and kind.
+	*/
+	static listExceptions(options) {
+		return (options?.client ?? client).get({
+			url: "/api/v1/exceptions",
+			...options
+		});
+	}
+	/**
+	* Get an exception item
+	*
+	* Returns a single exception item with its full detail.
+	*/
+	static getException(options) {
+		return (options.client ?? client).get({
+			url: "/api/v1/exceptions/{exception_id}",
+			...options
+		});
+	}
+	/**
+	* Acknowledge an exception item
+	*
+	* Moves the item to `acknowledged` ("someone is on it"), recording who. A no-op that returns the item unchanged when already acknowledged; rejected when already resolved.
+	*/
+	static acknowledgeException(options) {
+		return (options.client ?? client).post({
+			url: "/api/v1/exceptions/{exception_id}/acknowledge",
+			...options
+		});
+	}
+	/**
+	* Resolve an exception item
+	*
+	* Moves the item to `resolved` ("fixed"), recording who and an optional note.
+	*/
+	static resolveException(options) {
+		return (options.client ?? client).post({
+			url: "/api/v1/exceptions/{exception_id}/resolve",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
 var Files = class {
 	/**
 	* List all files
@@ -1961,6 +2035,101 @@ var Generations = class {
 		});
 	}
 };
+var Guardrails = class {
+	/**
+	* List guardrails
+	*
+	* Returns all guardrails in the project.
+	*/
+	static listGuardrails(options) {
+		return (options?.client ?? client).get({
+			url: "/api/v1/guardrails",
+			...options
+		});
+	}
+	/**
+	* Create a guardrail
+	*
+	* Creates a new guardrail in the project. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `soat.*` namespaces — an out-of-catalog `soat.*` key is rejected with 400.
+	*
+	*/
+	static createGuardrail(options) {
+		return (options.client ?? client).post({
+			url: "/api/v1/guardrails",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Delete a guardrail
+	*
+	* Deletes a guardrail and its archived versions by ID.
+	*/
+	static deleteGuardrail(options) {
+		return (options.client ?? client).delete({
+			url: "/api/v1/guardrails/{guardrail_id}",
+			...options
+		});
+	}
+	/**
+	* Get a guardrail
+	*
+	* Returns a single guardrail by ID.
+	*/
+	static getGuardrail(options) {
+		return (options.client ?? client).get({
+			url: "/api/v1/guardrails/{guardrail_id}",
+			...options
+		});
+	}
+	/**
+	* Update a guardrail
+	*
+	* Updates an existing guardrail. A `document` write increments `version` and archives the prior document as a GuardrailVersion; metadata-only edits (name / description / context) leave the version untouched.
+	*
+	*/
+	static updateGuardrail(options) {
+		return (options.client ?? client).patch({
+			url: "/api/v1/guardrails/{guardrail_id}",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Fetch an archived guardrail version
+	*
+	* Returns the exact `document` that governed at a given version. Approval items, activity entries, and exceptions record the version that governed them, so the audit chain survives edits.
+	*
+	*/
+	static getGuardrailVersion(options) {
+		return (options.client ?? client).get({
+			url: "/api/v1/guardrails/{guardrail_id}/versions/{version}",
+			...options
+		});
+	}
+	/**
+	* Dry-run evaluate a guardrail
+	*
+	* Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `soat.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `soat.tool.*`.
+	*
+	*/
+	static evaluateGuardrail(options) {
+		return (options.client ?? client).post({
+			url: "/api/v1/guardrails/{guardrail_id}/evaluate",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
 var IngestionRules = class {
 	/**
 	* List ingestion rules
@@ -2217,6 +2386,22 @@ var Orchestrations = class {
 		});
 	}
 	/**
+	* Get orchestration queue stats
+	*
+	* Returns a point-in-time snapshot of the orchestration run queue: how many tasks are waiting to be claimed (`queue_depth`), how many are currently claimed with a valid lease (`claimed_tasks`), the age of the oldest waiting task, recent claim-latency percentiles over a rolling in-process window, and a per-project breakdown. Intended for admin/operator policies; guarded by `orchestrations:GetQueueStats`. A project-scoped caller sees only their own projects under `per_project`.
+	*
+	*/
+	static getQueueStats(options) {
+		return (options?.client ?? client).get({
+			security: [{
+				scheme: "bearer",
+				type: "http"
+			}],
+			url: "/api/v1/orchestrations/queue/stats",
+			...options
+		});
+	}
+	/**
 	* Delete an orchestration
 	*
 	* Deletes an orchestration definition and all its runs.
@@ -2450,9 +2635,9 @@ var Projects = class {
 		});
 	}
 	/**
-	* Rename a project
+	* Update a project
 	*
-	* Updates a project's name. Requires admin role.
+	* Updates a project's name and/or its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project). Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
 	*/
 	static updateProject(options) {
 		return (options.client ?? client).patch({
@@ -2493,6 +2678,71 @@ var Projects = class {
 		});
 	}
 };
+var Quotas = class {
+	/**
+	* List quotas
+	*
+	* Returns the quotas defined in a project
+	*/
+	static listQuotas(options) {
+		return (options?.client ?? client).get({
+			url: "/api/v1/quotas",
+			...options
+		});
+	}
+	/**
+	* Create a quota
+	*
+	* Creates a project-scoped quota. `scope: agent` with `metric: requests` and `scope: api_key` with `metric: tokens`/`cost_usd` are both rejected with 400 (no attribution exists to enforce them). A duplicate quota (same project, scope, scope_ref, metric, window) is rejected with 409.
+	*/
+	static createQuota(options) {
+		return (options.client ?? client).post({
+			url: "/api/v1/quotas",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Delete a quota
+	*
+	* Deletes a quota and drops its window counters
+	*/
+	static deleteQuota(options) {
+		return (options.client ?? client).delete({
+			url: "/api/v1/quotas/{quota_id}",
+			...options
+		});
+	}
+	/**
+	* Get a quota
+	*
+	* Returns a specific quota, including current window usage
+	*/
+	static getQuota(options) {
+		return (options.client ?? client).get({
+			url: "/api/v1/quotas/{quota_id}",
+			...options
+		});
+	}
+	/**
+	* Update a quota
+	*
+	* Updates a quota's limit and/or mode. Other fields are immutable.
+	*/
+	static updateQuota(options) {
+		return (options.client ?? client).patch({
+			url: "/api/v1/quotas/{quota_id}",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
 var Secrets = class {
 	/**
 	* List secrets
@@ -3541,14 +3791,17 @@ exports.Agents = Agents;
 exports.AiProviders = AiProviders;
 exports.ApiKeys = ApiKeys;
 exports.Approvals = Approvals;
+exports.AuditLog = AuditLog;
 exports.Chats = Chats;
 exports.Conversations = Conversations;
 exports.Discussions = Discussions;
 exports.Documents = Documents;
 exports.Embeddings = Embeddings;
+exports.Exceptions = Exceptions;
 exports.Files = Files;
 exports.Formations = Formations;
 exports.Generations = Generations;
+exports.Guardrails = Guardrails;
 exports.IngestionRules = IngestionRules;
 exports.Knowledge = Knowledge;
 exports.Memories = Memories;
@@ -3556,6 +3809,7 @@ exports.MemoryEntries = MemoryEntries;
 exports.Orchestrations = Orchestrations;
 exports.Policies = Policies;
 exports.Projects = Projects;
+exports.Quotas = Quotas;
 exports.Secrets = Secrets;
 exports.Sessions = Sessions;
 exports.SoatClient = SoatClient;