@w6w/sdk 0.9.16 → 0.9.24

package/dist/src/console/models.js

@@ -0,0 +1,186 @@
+/**
+ * `client.console.models.*` — the model registry's console-only routes: catalog
+ * edits, rates, discovery, providers, budgets (CRUD + usage) and route writes.
+ *
+ * **Studio-internal, not the published partner contract.** The six stable
+ * operations (`models.list|get`, `modelRoutes.list|get|complete`,
+ * `modelUsage.query`) live on the root client (`../models.ts`,
+ * `endpoints.json`). This namespace lives under the `console` subpath export
+ * and is excluded from `endpoints.json` and the root barrel.
+ *
+ * **`complete` is deliberately NOT modeled here.** `client.modelRoutes.complete`
+ * already reaches it and returns the flat envelope as-is; a second method would
+ * give a caller two ways to the same route (the precedent of
+ * `console/aliases.ts`). Catalog writes and budget writes need a tenant admin.
+ *
+ * @module
+ */
+import { ApiError } from "../errors.js";
+import { path } from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * The budget write routes answer the budget object FLAT (`c.json(created, 201)`),
+ * not under a `budget` key. Accept that, and refuse a body that is not one.
+ */
+function budgetBody(res) {
+    const body = res.body;
+    if (typeof body === "object" && body !== null && !Array.isArray(body) &&
+        typeof body.id === "string") {
+        return body;
+    }
+    throw new ApiError(res.status, "bad_response", `Server returned a ${res.status} without a budget object in the response body.`, body);
+}
+/**
+ * The `console.models` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * await client.console.models.discover("conn_1");
+ * await client.console.models.createRoute({ name: "chat", model: "mdl_1", connection: "conn_1" });
+ * ```
+ */
+export class ModelsConsoleApi {
+    #host;
+    /** @param host - The client this namespace issues requests through. */
+    constructor(host) {
+        this.#host = host;
+    }
+    /** `PATCH /models/:id` — edit a catalog entry (tenant admin). */
+    async updateModel(id, patch) {
+        const res = await this.#host.request({
+            method: "PATCH",
+            path: path `/models/${id}`,
+            body: patch,
+        });
+        return unwrap(res, "model");
+    }
+    /** `PUT /models/:id/rates` — store a rate card (tenant admin, `201`). */
+    async putRates(id, input) {
+        const res = await this.#host.request({
+            method: "PUT",
+            path: path `/models/${id}/rates`,
+            body: input,
+        });
+        return unwrap(res, "rate");
+    }
+    /** `POST /models/discover` — sync a connection's models into the catalog (tenant admin). */
+    async discover(connection) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/models/discover",
+            body: { connection },
+        });
+        return res.body;
+    }
+    /** `GET /models/providers` — the providers the host maps. */
+    async providers() {
+        const res = await this.#host.request({ method: "GET", path: "/models/providers" });
+        return unwrap(res, "providers");
+    }
+    /** `GET /model-budgets` — the project's budgets. */
+    async listBudgets(options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/model-budgets",
+            query: { project: options?.project },
+            signal: options?.signal,
+        });
+        return unwrap(res, "budgets");
+    }
+    /** `POST /model-budgets` — create a budget (tenant admin, `201`). */
+    async createBudget(input, options) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/model-budgets",
+            query: { project: options?.project },
+            body: input,
+            signal: options?.signal,
+        });
+        return budgetBody(res);
+    }
+    /**
+     * `PATCH /model-budgets/:id` — edit a budget (tenant admin).
+     *
+     * The id resolves inside `?project=` (the default project when omitted), so a
+     * budget in another project needs `project` here, or the server answers 404.
+     *
+     * @throws {ApiError} `404 model_budget_not_found`.
+     */
+    async updateBudget(id, patch, options) {
+        const res = await this.#host.request({
+            method: "PATCH",
+            path: path `/model-budgets/${id}`,
+            query: { project: options?.project },
+            body: patch,
+            signal: options?.signal,
+        });
+        return budgetBody(res);
+    }
+    /**
+     * `DELETE /model-budgets/:id` — delete a budget (tenant admin). Resolves to nothing.
+     *
+     * @throws {ApiError} `404 model_budget_not_found` (pass `project` for a non-default project).
+     */
+    async deleteBudget(id, options) {
+        await this.#host.request({
+            method: "DELETE",
+            path: path `/model-budgets/${id}`,
+            query: { project: options?.project },
+            signal: options?.signal,
+        });
+    }
+    /**
+     * `GET /model-budgets/:id/usage` — a budget's used/reserved counters.
+     *
+     * @throws {ApiError} `404 model_budget_not_found` (pass `project` for a non-default project).
+     */
+    async budgetUsage(id, options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/model-budgets/${id}/usage`,
+            query: { project: options?.project },
+            signal: options?.signal,
+        });
+        return res.body;
+    }
+    /**
+     * `POST /model-routes` — create a route (`201`).
+     *
+     * @throws {ApiError} `409 model_route_exists`, `400 invalid_route_name`.
+     */
+    async createRoute(input, options) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/model-routes",
+            query: { project: options?.project },
+            body: input,
+            signal: options?.signal,
+        });
+        return unwrap(res, "route");
+    }
+    /** `PATCH /model-routes/:name` — edit a route. */
+    async updateRoute(name, patch, options) {
+        const res = await this.#host.request({
+            method: "PATCH",
+            path: path `/model-routes/${name}`,
+            query: { project: options?.project },
+            body: patch,
+            signal: options?.signal,
+        });
+        return unwrap(res, "route");
+    }
+    /**
+     * `DELETE /model-routes/:name` — delete a route. Resolves to nothing.
+     *
+     * @throws {ApiError} `404 model_route_not_found`.
+     */
+    async deleteRoute(name, options) {
+        await this.#host.request({
+            method: "DELETE",
+            path: path `/model-routes/${name}`,
+            query: { project: options?.project },
+            signal: options?.signal,
+        });
+    }
+}
+//# sourceMappingURL=models.js.map

package/dist/src/console/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../../src/console/models.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAE1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgIrC;;;GAGG;AACH,SAAS,UAAU,CAAC,GAA0B;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IACE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACjE,OAAQ,IAAgC,CAAC,EAAE,KAAK,QAAQ,EACxD,CAAC;QACD,OAAO,IAAmB,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,QAAQ,CAChB,GAAG,CAAC,MAAM,EACV,cAAc,EACd,qBAAqB,GAAG,CAAC,MAAM,gDAAgD,EAC/E,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,gBAAgB;IAClB,KAAK,CAAoB;IAElC,uEAAuE;IACvE,YAAY,IAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,KAAiB;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,EAAE;YACzB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,MAAM,CAAQ,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,QAAQ,CACZ,EAAU,EACV,KAAgE;QAEhE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,QAAQ;YAC/B,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,MAAM,CAAY,GAAG,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,QAAQ,CAAC,UAAkB;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB;YACzD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,EAAE,UAAU,EAAE;SACrB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,SAAS;QACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC5F,OAAO,MAAM,CAAkB,GAAG,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,WAAW,CAAC,OAA8B;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAgB,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,YAAY,CAChB,KAAuB,EACvB,OAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,EAAU,EACV,KAAuB,EACvB,OAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAA,kBAAkB,EAAE,EAAE;YAChC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,OAA8B;QAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI,CAAA,kBAAkB,EAAE,EAAE;YAChC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,OAA8B;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB;YACrD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,kBAAkB,EAAE,QAAQ;YACtC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAsB,EAAE,OAA8B;QACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAa,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,WAAW,CACf,IAAY,EACZ,KAAsB,EACtB,OAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAA,iBAAiB,IAAI,EAAE;YACjC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAa,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,OAA8B;QAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI,CAAA,iBAAiB,IAAI,EAAE;YACjC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/console/storage.d.ts

@@ -0,0 +1,221 @@
+/**
+ * `client.console.storage.*` — the account's storage bindings and agent-limit
+ * settings: the managed-store destination an account uploads to, and the caps
+ * (§P4: `max_file_bytes`, `max_package_bytes`, `max_files`, `retentionDays`)
+ * that apply to those uploads.
+ *
+ * **Studio-internal, not the published partner contract.** Both routes are
+ * account-admin surfaces (a member's write answers `403 forbidden`; another
+ * account's id is the uniform `404`) and live under the `console` subpath
+ * export only — deliberately absent from `endpoints.json` and from the root
+ * barrel, exactly like `console.models`' catalog edits (P-D5's console-only
+ * rule).
+ *
+ * **Nothing here carries a destination or a credential.** T4.1.1's wire shape
+ * is an allowlist: a binding never returns its bucket, region, endpoint, root
+ * prefix, credential or a revision's `config`, and settings never return a
+ * storage path — only the numeric limits and a binding *id*. The types below
+ * model that allowlist, not the row, so there is no field for a caller to be
+ * tempted by.
+ *
+ * **The account is never a parameter.** Both services resolve the account from
+ * the caller's own credential (the account scope on the bearer) plus a
+ * server-side admin check, never from an id this client sends — the same rule
+ * `console.tenantLoginFlags` and `console.tenantOAuthApps` follow.
+ *
+ * @module
+ */
+import { type HttpResponse, type RequestOptions } from "../http.ts";
+/** The slice of `W6WClient` this namespace needs: the transport. */
+export interface StorageConsoleHost {
+    /** Perform one request. */
+    request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
+}
+/** Per-call options for the reads. */
+export interface StorageConsoleOptions {
+    /** Abort signal. */
+    signal?: AbortSignal;
+}
+/** Options for `bindings.list`. */
+export interface ListStorageBindingsOptions extends StorageConsoleOptions {
+    /** Include retired bindings (the server elides them by default). */
+    includeRetired?: boolean;
+}
+/** One binding's newest revision, as the wire exposes it: identity only, no destination. */
+export interface StorageBindingRevisionRef {
+    id: string;
+    revision: number;
+    createdAt: string;
+}
+/** The stored outcome of the last reachability probe: a code and a timestamp, never a free-form blob. */
+export interface StorageBindingHealth {
+    ok?: boolean;
+    code?: string;
+    checkedAt?: string;
+}
+/**
+ * A storage binding, as the server sends it.
+ *
+ * `serverDefault` marks the account using the server's own store; `status` is
+ * `active` until the binding is retired (`retiredAt` then carries the moment).
+ */
+export interface StorageBinding {
+    id: string;
+    name: string;
+    /** Store kind — `s3` today. */
+    provider: string;
+    connectionId: string | null;
+    serverDefault: boolean;
+    status: string;
+    health: StorageBindingHealth;
+    activeRevisionId: string | null;
+    revision: StorageBindingRevisionRef | null;
+    createdAt: string;
+    updatedAt: string;
+    retiredAt: string | null;
+}
+/**
+ * Body of `bindings.create`.
+ *
+ * The destination fields go **up** only: the caller supplies them once (they
+ * reach the service through the account's connection), and no read returns
+ * them. `rootPrefix` is refused when it is non-empty; the store's prefix is
+ * the server's to choose.
+ */
+export interface CreateStorageBindingInput {
+    name?: string;
+    connectionId: string;
+    bucket: string;
+    region: string;
+    endpoint?: string;
+    forcePathStyle?: boolean;
+    rootPrefix?: string;
+}
+/** What `bindings.migrate` accepted: the jobs it enqueued, not the jobs themselves. */
+export interface StorageMigration {
+    bindingId: string;
+    toRevisionId: string;
+    /** How many copies the runner queued (`202 Accepted`). */
+    enqueued: number;
+}
+/** The effective caps: `account setting ⊓ server ceiling`, per field. */
+export interface AgentLimits {
+    maxFileBytes: number;
+    maxPackageBytes: number;
+    maxFiles: number;
+}
+/** The account's own stored values; `null` means "not set — use the default". */
+export interface AgentSettingsValues {
+    maxFileBytes: number | null;
+    maxPackageBytes: number | null;
+    maxFiles: number | null;
+    retentionDays: number | null;
+    storageBindingId: string | null;
+}
+/**
+ * `GET`/`PATCH /agent-settings` — the effective limits, the stored values
+ * behind them, and when the row last changed (`null` until the first patch).
+ */
+export interface AgentSettings {
+    limits: AgentLimits;
+    settings: AgentSettingsValues;
+    updatedAt: string | null;
+}
+/**
+ * Body of `settings.patch` — an allowlist of the five settable fields, key by
+ * key. An omitted field is left alone; `null` clears it back to the default.
+ *
+ * The server validates it (unknown field, a non-positive or non-integer value,
+ * a value above the operator's ceiling ⇒ `422`; an unknown binding id ⇒ the
+ * uniform `404`), so nothing is pre-validated here.
+ */
+export type AgentSettingsPatch = Partial<AgentSettingsValues>;
+/**
+ * `client.console.storage.bindings.*` — `GET|POST /storage-bindings`,
+ * `GET|DELETE /storage-bindings/:id`, `POST /storage-bindings/:id/migrate`.
+ *
+ * Reads are open to account members; `create`, `delete` and `migrate` need an
+ * account admin (`403 forbidden` otherwise).
+ */
+export declare class StorageBindingsApi {
+    #private;
+    /** @param host - The client this namespace issues requests through. */
+    constructor(host: StorageConsoleHost);
+    /** `GET /storage-bindings` — the account's bindings, retired ones elided unless asked for. */
+    list(options?: ListStorageBindingsOptions): Promise<StorageBinding[]>;
+    /**
+     * `POST /storage-bindings` — store a destination (`201`, the binding answered flat).
+     *
+     * @throws {ApiError} `403 forbidden` (not an account admin), `422` for a refused
+     *   destination (a non-empty `rootPrefix`, an unreachable endpoint).
+     */
+    create(input: CreateStorageBindingInput, options?: StorageConsoleOptions): Promise<StorageBinding>;
+    /**
+     * `GET /storage-bindings/:id` — one binding.
+     *
+     * @throws {ApiError} `404 not_found` — uniform, so another account's id is
+     *   indistinguishable from a nonexistent one.
+     */
+    get(id: string, options?: StorageConsoleOptions): Promise<StorageBinding>;
+    /**
+     * `DELETE /storage-bindings/:id` — retire a binding. Resolves to nothing.
+     *
+     * Retire, not erase: the row stays readable (with `includeRetired`) so
+     * versions that live on it keep their provenance.
+     *
+     * @throws {ApiError} `409` while asset versions still sit under the binding
+     *   (`connection_in_use`-shaped refusal), `403 forbidden`, `404 not_found`.
+     */
+    delete(id: string, options?: StorageConsoleOptions): Promise<void>;
+    /**
+     * `POST /storage-bindings/:id/migrate` — enqueue copy → verify → swap onto a
+     * new revision (`202`).
+     *
+     * The migration is asynchronous: the answer counts the jobs, and the caller
+     * polls the binding (`get`) or the version it moves.
+     *
+     * @throws {ApiError} `403 forbidden`, `404 not_found`, `409` when a migration
+     *   is already running.
+     */
+    migrate(id: string, options?: StorageConsoleOptions): Promise<StorageMigration>;
+}
+/**
+ * `client.console.storage.settings.*` — `GET|PATCH /agent-settings`.
+ *
+ * Account-scoped (§P4/A-D4): members may read, only an account admin may patch.
+ */
+export declare class AgentSettingsApi {
+    #private;
+    /** @param host - The client this namespace issues requests through. */
+    constructor(host: StorageConsoleHost);
+    /** `GET /agent-settings` — the effective limits and the stored values behind them. */
+    get(options?: StorageConsoleOptions): Promise<AgentSettings>;
+    /**
+     * `PATCH /agent-settings` — change the stored values. Fields are sent by
+     * omission; `null` clears one back to the default.
+     *
+     * @throws {ApiError} `403 forbidden` (not an account admin), `422` for an
+     *   unknown field, a non-positive value or one above the server ceiling, and
+     *   the uniform `404` for an unknown `storageBindingId`.
+     */
+    patch(input: AgentSettingsPatch, options?: StorageConsoleOptions): Promise<AgentSettings>;
+}
+/**
+ * The `console.storage` namespace on a `W6WClient` — bindings and the agent
+ * limits they bound.
+ *
+ * @example
+ * ```ts
+ * const [binding] = await client.console.storage.bindings.list();
+ * await client.console.storage.settings.patch({ maxFileBytes: 10 * 1024 * 1024 });
+ * ```
+ */
+export declare class StorageConsoleApi {
+    /** `console.storage.bindings.*`. */
+    readonly bindings: StorageBindingsApi;
+    /** `console.storage.settings.*`. */
+    readonly settings: AgentSettingsApi;
+    /** @param host - The client this namespace group issues requests through. */
+    constructor(host: StorageConsoleHost);
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/src/console/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/console/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E,oEAAoE;AACpE,MAAM,WAAW,kBAAkB;IACjC,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED,sCAAsC;AACtC,MAAM,WAAW,qBAAqB;IACpC,oBAAoB;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,mCAAmC;AACnC,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE,oEAAoE;IACpE,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,4FAA4F;AAC5F,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yGAAyG;AACzG,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,oBAAoB,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAuC9D;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAG7B,uEAAuE;gBAC3D,IAAI,EAAE,kBAAkB;IAIpC,8FAA8F;IACxF,IAAI,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAU3E;;;;;OAKG;IACG,MAAM,CACV,KAAK,EAAE,yBAAyB,EAChC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,cAAc,CAAC;IAU1B;;;;;OAKG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IAS/E;;;;;;;;OAQG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxE;;;;;;;;;OASG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAQtF;AAED;;;;GAIG;AACH,qBAAa,gBAAgB;;IAG3B,uEAAuE;gBAC3D,IAAI,EAAE,kBAAkB;IAIpC,sFAAsF;IAChF,GAAG,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC;IASlE;;;;;;;OAOG;IACG,KAAK,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC;CAShG;AAED;;;;;;;;;GASG;AACH,qBAAa,iBAAiB;IAC5B,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAEpC,6EAA6E;gBACjE,IAAI,EAAE,kBAAkB;CAIrC"}

package/dist/src/console/storage.js

@@ -0,0 +1,198 @@
+/**
+ * `client.console.storage.*` — the account's storage bindings and agent-limit
+ * settings: the managed-store destination an account uploads to, and the caps
+ * (§P4: `max_file_bytes`, `max_package_bytes`, `max_files`, `retentionDays`)
+ * that apply to those uploads.
+ *
+ * **Studio-internal, not the published partner contract.** Both routes are
+ * account-admin surfaces (a member's write answers `403 forbidden`; another
+ * account's id is the uniform `404`) and live under the `console` subpath
+ * export only — deliberately absent from `endpoints.json` and from the root
+ * barrel, exactly like `console.models`' catalog edits (P-D5's console-only
+ * rule).
+ *
+ * **Nothing here carries a destination or a credential.** T4.1.1's wire shape
+ * is an allowlist: a binding never returns its bucket, region, endpoint, root
+ * prefix, credential or a revision's `config`, and settings never return a
+ * storage path — only the numeric limits and a binding *id*. The types below
+ * model that allowlist, not the row, so there is no field for a caller to be
+ * tempted by.
+ *
+ * **The account is never a parameter.** Both services resolve the account from
+ * the caller's own credential (the account scope on the bearer) plus a
+ * server-side admin check, never from an id this client sends — the same rule
+ * `console.tenantLoginFlags` and `console.tenantOAuthApps` follow.
+ *
+ * @module
+ */
+import { ApiError } from "../errors.js";
+import { path } from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * A binding is answered FLAT (`c.json(bindingJson(view))`), not inside an
+ * envelope. Accept that, and refuse a body that is not one.
+ */
+function bindingBody(res) {
+    const body = res.body;
+    if (typeof body === "object" && body !== null && !Array.isArray(body) &&
+        typeof body.id === "string") {
+        return body;
+    }
+    throw new ApiError(res.status, "bad_response", `Server returned a ${res.status} without a binding object in the response body.`, body);
+}
+/** The same allowlist for settings, whose only required key is the effective `limits`. */
+function settingsBody(res) {
+    const body = res.body;
+    if (typeof body === "object" && body !== null && !Array.isArray(body) &&
+        typeof body.limits === "object") {
+        return body;
+    }
+    throw new ApiError(res.status, "bad_response", `Server returned a ${res.status} without a settings object in the response body.`, body);
+}
+/**
+ * `client.console.storage.bindings.*` — `GET|POST /storage-bindings`,
+ * `GET|DELETE /storage-bindings/:id`, `POST /storage-bindings/:id/migrate`.
+ *
+ * Reads are open to account members; `create`, `delete` and `migrate` need an
+ * account admin (`403 forbidden` otherwise).
+ */
+export class StorageBindingsApi {
+    #host;
+    /** @param host - The client this namespace issues requests through. */
+    constructor(host) {
+        this.#host = host;
+    }
+    /** `GET /storage-bindings` — the account's bindings, retired ones elided unless asked for. */
+    async list(options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/storage-bindings",
+            query: { includeRetired: options?.includeRetired },
+            signal: options?.signal,
+        });
+        return unwrap(res, "bindings");
+    }
+    /**
+     * `POST /storage-bindings` — store a destination (`201`, the binding answered flat).
+     *
+     * @throws {ApiError} `403 forbidden` (not an account admin), `422` for a refused
+     *   destination (a non-empty `rootPrefix`, an unreachable endpoint).
+     */
+    async create(input, options) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/storage-bindings",
+            body: input,
+            signal: options?.signal,
+        });
+        return bindingBody(res);
+    }
+    /**
+     * `GET /storage-bindings/:id` — one binding.
+     *
+     * @throws {ApiError} `404 not_found` — uniform, so another account's id is
+     *   indistinguishable from a nonexistent one.
+     */
+    async get(id, options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/storage-bindings/${id}`,
+            signal: options?.signal,
+        });
+        return bindingBody(res);
+    }
+    /**
+     * `DELETE /storage-bindings/:id` — retire a binding. Resolves to nothing.
+     *
+     * Retire, not erase: the row stays readable (with `includeRetired`) so
+     * versions that live on it keep their provenance.
+     *
+     * @throws {ApiError} `409` while asset versions still sit under the binding
+     *   (`connection_in_use`-shaped refusal), `403 forbidden`, `404 not_found`.
+     */
+    async delete(id, options) {
+        await this.#host.request({
+            method: "DELETE",
+            path: path `/storage-bindings/${id}`,
+            signal: options?.signal,
+        });
+    }
+    /**
+     * `POST /storage-bindings/:id/migrate` — enqueue copy → verify → swap onto a
+     * new revision (`202`).
+     *
+     * The migration is asynchronous: the answer counts the jobs, and the caller
+     * polls the binding (`get`) or the version it moves.
+     *
+     * @throws {ApiError} `403 forbidden`, `404 not_found`, `409` when a migration
+     *   is already running.
+     */
+    async migrate(id, options) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/storage-bindings/${id}/migrate`,
+            signal: options?.signal,
+        });
+        return res.body;
+    }
+}
+/**
+ * `client.console.storage.settings.*` — `GET|PATCH /agent-settings`.
+ *
+ * Account-scoped (§P4/A-D4): members may read, only an account admin may patch.
+ */
+export class AgentSettingsApi {
+    #host;
+    /** @param host - The client this namespace issues requests through. */
+    constructor(host) {
+        this.#host = host;
+    }
+    /** `GET /agent-settings` — the effective limits and the stored values behind them. */
+    async get(options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/agent-settings",
+            signal: options?.signal,
+        });
+        return settingsBody(res);
+    }
+    /**
+     * `PATCH /agent-settings` — change the stored values. Fields are sent by
+     * omission; `null` clears one back to the default.
+     *
+     * @throws {ApiError} `403 forbidden` (not an account admin), `422` for an
+     *   unknown field, a non-positive value or one above the server ceiling, and
+     *   the uniform `404` for an unknown `storageBindingId`.
+     */
+    async patch(input, options) {
+        const res = await this.#host.request({
+            method: "PATCH",
+            path: "/agent-settings",
+            body: input,
+            signal: options?.signal,
+        });
+        return settingsBody(res);
+    }
+}
+/**
+ * The `console.storage` namespace on a `W6WClient` — bindings and the agent
+ * limits they bound.
+ *
+ * @example
+ * ```ts
+ * const [binding] = await client.console.storage.bindings.list();
+ * await client.console.storage.settings.patch({ maxFileBytes: 10 * 1024 * 1024 });
+ * ```
+ */
+export class StorageConsoleApi {
+    /** `console.storage.bindings.*`. */
+    bindings;
+    /** `console.storage.settings.*`. */
+    settings;
+    /** @param host - The client this namespace group issues requests through. */
+    constructor(host) {
+        this.bindings = new StorageBindingsApi(host);
+        this.settings = new AgentSettingsApi(host);
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/src/console/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/console/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAsHrC;;;GAGG;AACH,SAAS,WAAW,CAAC,GAA0B;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IACE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACjE,OAAQ,IAAgC,CAAC,EAAE,KAAK,QAAQ,EACxD,CAAC;QACD,OAAO,IAAsB,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,QAAQ,CAChB,GAAG,CAAC,MAAM,EACV,cAAc,EACd,qBAAqB,GAAG,CAAC,MAAM,iDAAiD,EAChF,IAAI,CACL,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,GAA0B;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IACE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACjE,OAAQ,IAAgC,CAAC,MAAM,KAAK,QAAQ,EAC5D,CAAC;QACD,OAAO,IAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,QAAQ,CAChB,GAAG,CAAC,MAAM,EACV,cAAc,EACd,qBAAqB,GAAG,CAAC,MAAM,kDAAkD,EACjF,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAqB;IAEnC,uEAAuE;IACvE,YAAY,IAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,IAAI,CAAC,OAAoC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE;YAClD,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAmB,GAAG,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,KAAgC,EAChC,OAA+B;QAE/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,OAA+B;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,qBAAqB,EAAE,EAAE;YACnC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAA+B;QACtD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI,CAAA,qBAAqB,EAAE,EAAE;YACnC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAA+B;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB;YACrD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,qBAAqB,EAAE,UAAU;YAC3C,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAClB,KAAK,CAAqB;IAEnC,uEAAuE;IACvE,YAAY,IAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,GAAG,CAAC,OAA+B;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,KAAyB,EAAE,OAA+B;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAiB;IAC5B,oCAAoC;IAC3B,QAAQ,CAAqB;IACtC,oCAAoC;IAC3B,QAAQ,CAAmB;IAEpC,6EAA6E;IAC7E,YAAY,IAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF"}