codai-sdk 0.65.0 → 0.67.0

package/dist/index.js

@@ -3036,6 +3036,10 @@ var VoiceRevocations = class {
 
 //#endregion
 //#region src/resources/vault.ts
+/** The UTF-8 message an unlock proof covers: `codai-vault/unlock/v1|<challenge>|<device_id or "passkey">`. */
+function vaultUnlockMessage(challenge, deviceIdOrPasskey) {
+	return `codai-vault/unlock/v1|${challenge}|${deviceIdOrPasskey}`;
+}
 const seg = (base, id, suffix = "") => `${base}/${encodeURIComponent(id)}${suffix}`;
 /** `/v1/vault/devices/*` — hardware-backed device approval keys (public keys only; revocation is instant). */
 var VaultDevices = class {
@@ -3124,6 +3128,53 @@ var Vault = class {
 	setDefaultTier(defaultTier, opts = {}) {
 		return this.send("PATCH", "/v1/vault/settings", opts, { default_tier: defaultTier });
 	}
+	/**
+	* `PATCH /v1/vault/settings` — `default_tier` and/or partial anomaly `guards` (merged over the current ones).
+	* Answers the effective `{ default_tier, guards }`.
+	*/
+	updateSettings(body, opts = {}) {
+		if (body.default_tier === void 0 && body.guards === void 0) return Promise.reject(/* @__PURE__ */ new TypeError("updateSettings needs default_tier and/or guards"));
+		return this.send("PATCH", "/v1/vault/settings", opts, { ...body });
+	}
+	/**
+	* `POST /v1/vault/lock` — panic: revoke every live grant, deny every pending approval, lock the vault (agent uses
+	* then answer `vault_locked`). Device keys stay enrolled. Idempotent.
+	*/
+	lock(params = {}, opts = {}) {
+		return this.send("POST", "/v1/vault/lock", opts, { via: params.via });
+	}
+	/** `POST /v1/vault/unlock/challenge` — single-use unlock challenge, valid 5 minutes. */
+	unlockChallenge(opts = {}) {
+		return this.send("POST", "/v1/vault/unlock/challenge", opts, {});
+	}
+	/**
+	* `POST /v1/vault/unlock` — end a lock with a device-key proof over {@link vaultUnlockMessage} or a passkey whose
+	* challenge is base64url(SHA-256(that message with `passkey`)). 403 `challenge_invalid`, `wear_t3_only`, …
+	*/
+	unlock(body, opts = {}) {
+		return this.send("POST", "/v1/vault/unlock", opts, { ...body });
+	}
+	/** `GET /v1/vault/limits` — per-handle usage caps on your items. */
+	async limits(opts = {}) {
+		return [...(await this.get("/v1/vault/limits", opts)).limits];
+	}
+	/**
+	* `PUT /v1/vault/items/{id}/limits` — all three keys required; `null` removes a cap, all `null` removes the limits
+	* (answers `null`). Over a cap the broker calls answer 429 `vault_rate_limited` with `Retry-After`.
+	*/
+	async setLimits(id, limits, opts = {}) {
+		return (await this.http.json(seg("/v1/vault/items", id, "/limits"), {
+			method: "PUT",
+			body: {
+				per_minute: limits.per_minute,
+				per_day: limits.per_day,
+				units_per_day: limits.units_per_day
+			},
+			ext: opts.ext,
+			signal: opts.signal,
+			noRetry: true
+		})).limits ?? null;
+	}
 	/** `GET /v1/vault/vaults` — vaults you belong to, with your role and sealed vault key. */
 	vaults(opts = {}) {
 		return this.get("/v1/vault/vaults", opts);
@@ -3174,6 +3225,10 @@ var Vault = class {
 	revokeGrant(id, opts = {}) {
 		return this.send("DELETE", seg("/v1/vault/grants", id), opts);
 	}
+	/** `POST /v1/vault/grants/revoke-task` — revoke every live grant of a task / session; answers `{ revoked }`. */
+	revokeTaskGrants(task, opts = {}) {
+		return this.send("POST", "/v1/vault/grants/revoke-task", opts, { task });
+	}
 	/** `GET /v1/vault/events` — append-only audit log (never contains secret values). */
 	events(params = {}, opts = {}) {
 		return this.get("/v1/vault/events", opts, { limit: params.limit });
@@ -4743,18 +4798,31 @@ var Notifications = class {
 //#region src/resources/prompts.ts
 /** `/v1/prompts/*` — pending prompts: ready-to-paste prompts left for a future chat (handoffs, follow-ups). */
 const one$3 = (id, suffix = "") => `/v1/prompts/${encodeURIComponent(id)}${suffix}`;
+function filterQuery(q) {
+	const tag = Array.isArray(q.tag) ? q.tag.join(",") : q.tag;
+	return {
+		status: q.status,
+		limit: q.limit,
+		tag: tag || void 0,
+		priority_min: q.priority_min,
+		q: q.q,
+		templates: q.templates,
+		sort: q.sort,
+		order: q.order
+	};
+}
 var Prompts = class {
 	http;
 	constructor(http) {
 		this.http = http;
 	}
-	/** `GET /v1/prompts?status=&limit=` — default `open`; `due` = open and `not_before` empty or passed. */
+	/**
+	* `GET /v1/prompts?status=&limit=&tag=&priority_min=&q=&templates=&sort=&order=` — default `open`, templates
+	* excluded; `due` = open and `not_before` empty or passed; several tags = AND.
+	*/
 	list(query = {}, opts = {}) {
 		return this.http.json("/v1/prompts", {
-			query: {
-				status: query.status,
-				limit: query.limit
-			},
+			query: filterQuery(query),
 			ext: opts.ext,
 			signal: opts.signal
 		});
@@ -4834,6 +4902,42 @@ var Prompts = class {
 			noRetry: true
 		});
 	}
+	/** `POST /v1/prompts/bulk` — one action over up to 200 of your prompts → `{ updated }`. */
+	bulk(body, opts = {}) {
+		return this.http.json("/v1/prompts/bulk", {
+			method: "POST",
+			body,
+			ext: opts.ext,
+			signal: opts.signal
+		});
+	}
+	/** `GET /v1/prompts/{id}/events` — history, newest first (max 200). */
+	events(id, opts = {}) {
+		return this.http.json(one$3(id, "/events"), {
+			ext: opts.ext,
+			signal: opts.signal
+		});
+	}
+	/** `POST /v1/prompts/{id}/instantiate` — open copy of a template (201). */
+	instantiate(id, opts = {}) {
+		return this.http.json(one$3(id, "/instantiate"), {
+			method: "POST",
+			ext: opts.ext,
+			signal: opts.signal,
+			noRetry: true
+		});
+	}
+	/** `GET /v1/prompts/export?format=csv|md` — list filters apply (status defaults to `all`); returns the document text. */
+	async exportPrompts(query = {}, opts = {}) {
+		return (await this.http.request("/v1/prompts/export", {
+			query: {
+				...filterQuery(query),
+				format: query.format ?? "csv"
+			},
+			ext: opts.ext,
+			signal: opts.signal
+		})).text();
+	}
 	/** `GET /v1/prompts/stream` — live `prompt` events (keepalive comments are skipped). Closed by the server after 6 h. */
 	async *stream(opts = {}) {
 		const frames = this.http.sse("/v1/prompts/stream", {
@@ -6305,7 +6409,13 @@ const OPERATION_METHODS = {
 	createVoiceRevocation: "voiceRevocations.create",
 	getVaultAccount: "vault.account",
 	putVaultAccount: "vault.putAccount",
-	patchVaultSettings: "vault.setDefaultTier",
+	patchVaultSettings: "vault.updateSettings",
+	lockVault: "vault.lock",
+	createVaultUnlockChallenge: "vault.unlockChallenge",
+	unlockVault: "vault.unlock",
+	listVaultLimits: "vault.limits",
+	setVaultItemLimits: "vault.setLimits",
+	revokeVaultTaskGrants: "vault.revokeTaskGrants",
 	listVaults: "vault.vaults",
 	createVault: "vault.createVault",
 	listVaultItems: "vault.items",
@@ -6399,6 +6509,10 @@ const OPERATION_METHODS = {
 	verifyPrompt: "prompts.verify",
 	verifyPrompts: "prompts.verifyMany",
 	streamPrompts: "prompts.stream",
+	exportPrompts: "prompts.exportPrompts",
+	bulkPrompts: "prompts.bulk",
+	listPromptEvents: "prompts.events",
+	instantiatePrompt: "prompts.instantiate",
 	listTranscripts: "transcripts.list",
 	createTranscript: "transcripts.create",
 	getTranscriptUsage: "transcripts.usage",
@@ -6816,6 +6930,7 @@ var CodaiApps = class {
 *   client.voiceRevocations.create (public takedown ticket for a voice cloned in codai Studio; no key needed)
 *   client.vault.account / .items / .putItem / .rules / .approvals / .decide / .catalog / .use / .httpCall / .resolve
 *   client.vault.devices.challenge / .enroll / .list / .rename / .revoke (device approval keys, V-27)
+*   client.vault.updateSettings / .lock / .unlockChallenge / .unlock / .limits / .setLimits / .revokeTaskGrants (guards, v4)
 *     (zero-knowledge credentials vault: ciphertext only; the broker calls never return secret values)
 *   client.abuseReports.create (public DSA notice about a codai Studio share / review link; no key needed)
 *   client.provenance.check (public: which codai AI-provenance marks a file carries; no key needed)
@@ -7112,5 +7227,5 @@ function allKeys(obj) {
 }
 
 //#endregion
-export { AbuseReports, Account, AgentRuns, Agents, Assets, Audio, Batches, Billing, BrandKits, Cards, Chat, ChatCompletions, Codai, Codai as default, CodaiApps, CodaiError, Creatives, Devices, Documents, Embeddings, EnvironmentFiles, EnvironmentJobs, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Exports, Feedback, Health, Heartbeats, Hosts, HttpClient, Images, Keys, Lists, Memory, Messages, Models, Music, Notifications, OPERATION_METHODS, OrgMembers, Orgs, OsGate, PROVENANCE_MAX_BYTES, PhoneModels, Productions, Projects, Prompts, Provenance, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Realtime, RealtimeSession, Receipts, Referrals, Renders, Research, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SandboxFiles, Sandboxes, ScheduleExecutor, SchedulerHosts, Schedules, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Settings, Sfx, Shares, SystemOne, TUS_CHUNK_BYTES, Tasks, Templates, Tokens, Tools, Transcripts, Triggers, Usage, Vault, VaultDevices, Verify, Videos, VoiceRevocations, extensionHeaders, frameJson, isAssetDto, isProductionFinished, isResearchFinished, mergeToolCall, readSse, realtimeUrl, resolveAttestationStatement, settingsConflictCurrent, shareTokenFrom, uploadIdFromLocation, verifyAttestationWithKeys, verifyResolveWebhook };
+export { AbuseReports, Account, AgentRuns, Agents, Assets, Audio, Batches, Billing, BrandKits, Cards, Chat, ChatCompletions, Codai, Codai as default, CodaiApps, CodaiError, Creatives, Devices, Documents, Embeddings, EnvironmentFiles, EnvironmentJobs, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Exports, Feedback, Health, Heartbeats, Hosts, HttpClient, Images, Keys, Lists, Memory, Messages, Models, Music, Notifications, OPERATION_METHODS, OrgMembers, Orgs, OsGate, PROVENANCE_MAX_BYTES, PhoneModels, Productions, Projects, Prompts, Provenance, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Realtime, RealtimeSession, Receipts, Referrals, Renders, Research, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SandboxFiles, Sandboxes, ScheduleExecutor, SchedulerHosts, Schedules, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Settings, Sfx, Shares, SystemOne, TUS_CHUNK_BYTES, Tasks, Templates, Tokens, Tools, Transcripts, Triggers, Usage, Vault, VaultDevices, Verify, Videos, VoiceRevocations, extensionHeaders, frameJson, isAssetDto, isProductionFinished, isResearchFinished, mergeToolCall, readSse, realtimeUrl, resolveAttestationStatement, settingsConflictCurrent, shareTokenFrom, uploadIdFromLocation, vaultUnlockMessage, verifyAttestationWithKeys, verifyResolveWebhook };
 //# sourceMappingURL=index.js.map