primitive-admin 1.0.52 → 1.0.54

package/dist/src/lib/api-client.d.ts

@@ -301,6 +301,17 @@ interface TopPromptsResponse {
     prompts: PromptAnalyticsSummary[];
     _timing: AnalyticsTiming;
 }
+/**
+ * One operation in an `admin-data/batch` request. Mirrors the wire shape the
+ * DatabaseDO expects (`databases-controller.ts`): `{ op, modelName, id, data }`.
+ * `data` is required for `save`/`patch` and omitted for `delete`.
+ */
+export interface DatabaseBatchOperation {
+    op: "save" | "patch" | "delete";
+    modelName: string;
+    id: string;
+    data?: any;
+}
 export declare class ApiClient {
     private credentials;
     constructor();
@@ -445,6 +456,14 @@ export declare class ApiClient {
         summary?: string;
     }): Promise<any>;
     deleteAppSecret(appId: string, secretId: string): Promise<any>;
+    listAppConfigVars(appId: string): Promise<any[]>;
+    upsertAppConfigVar(appId: string, key: string, payload: {
+        value: string;
+        summary?: string;
+    }, expectedModifiedAt?: string, options?: {
+        expectNotExists?: boolean;
+    }): Promise<any>;
+    deleteAppConfigVar(appId: string, key: string, expectedModifiedAt?: string): Promise<any>;
     listWebhooks(appId: string, params?: {
         status?: string;
         cursor?: string;
@@ -474,6 +493,45 @@ export declare class ApiClient {
     pauseCronTrigger(appId: string, triggerId: string): Promise<any>;
     resumeCronTrigger(appId: string, triggerId: string): Promise<any>;
     testCronTrigger(appId: string, triggerId: string): Promise<any>;
+    listIterations(appId: string): Promise<{
+        items: any[];
+    }>;
+    getIteration(appId: string, iterationName: string): Promise<any>;
+    resetIteration(appId: string, iterationName: string): Promise<any>;
+    readResourceMetadata(appId: string, resourceType: string, resourceId: string, category: string): Promise<any>;
+    writeResourceMetadata(appId: string, resourceType: string, resourceId: string, category: string, data: Record<string, any>): Promise<any>;
+    batchReadResourceMetadata(appId: string, requests: Array<{
+        resourceType: string;
+        resourceId: string;
+        categories: string[];
+    }>): Promise<{
+        results: any[];
+    }>;
+    /**
+     * List every stored metadata category on one resource (issue #1402 — debug
+     * tooling). The CLI authenticates as a console admin, so the app-level
+     * owner/admin bypass returns every category regardless of its readRule.
+     */
+    listResourceMetadata(appId: string, resourceType: string, resourceId: string): Promise<{
+        resourceType: string;
+        resourceId: string;
+        categories: Array<{
+            category: string;
+            data: Record<string, any>;
+            schemaVersion: number | null;
+        }>;
+    }>;
+    /**
+     * Delete one resource's metadata for one category (issue #1402 — debug
+     * tooling). Idempotent: deleting an absent item succeeds with
+     * `deleted: false` rather than a 404.
+     */
+    deleteResourceMetadata(appId: string, resourceType: string, resourceId: string, category: string): Promise<{
+        resourceType: string;
+        resourceId: string;
+        category: string;
+        deleted: boolean;
+    }>;
     listPrompts(appId: string, params?: {
         status?: string;
         limit?: number;
@@ -510,6 +568,17 @@ export declare class ApiClient {
         items: any[];
     }>;
     getScript(appId: string, scriptId: string): Promise<any>;
+    /**
+     * List a script's versioned configs (the `ScriptConfig` rows). Each config
+     * is a distinct block version: `configId` is the stable version selector,
+     * `contentHash` is its content identity, and `status` reports whether it is
+     * `active`/`draft`/`archived`. The script header's `activeConfigId` names
+     * the live version. Used by `scripts configs list` and by the script test
+     * commands to run against a specific pinned version.
+     */
+    listScriptConfigs(appId: string, scriptId: string): Promise<{
+        items: any[];
+    }>;
     createScript(appId: string, payload: {
         name: string;
         body: string;
@@ -533,11 +602,11 @@ export declare class ApiClient {
         activeConfigId: string | null;
         activeConfigName: string | null;
     }>;
-    listTestCases(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string): Promise<{
+    listTestCases(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string): Promise<{
         items: any[];
     }>;
-    getTestCase(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, testCaseId: string): Promise<any>;
-    createTestCase(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, payload: {
+    getTestCase(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string): Promise<any>;
+    createTestCase(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, payload: {
         name: string;
         inputVariables: Record<string, any>;
         expectedOutputPattern?: string;
@@ -547,7 +616,7 @@ export declare class ApiClient {
         evaluatorPromptId?: string;
         evaluatorConfigId?: string;
     }): Promise<any>;
-    updateTestCase(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, testCaseId: string, payload: {
+    updateTestCase(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string, payload: {
         name?: string;
         inputVariables?: Record<string, any>;
         expectedOutputPattern?: string | null;
@@ -557,8 +626,8 @@ export declare class ApiClient {
         evaluatorPromptId?: string | null;
         evaluatorConfigId?: string | null;
     }): Promise<any>;
-    deleteTestCase(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, testCaseId: string): Promise<void>;
-    listTestCaseAttachments(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, testCaseId: string): Promise<{
+    deleteTestCase(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string): Promise<void>;
+    listTestCaseAttachments(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string): Promise<{
         attachments: Array<{
             filename: string;
             contentType: string;
@@ -566,7 +635,7 @@ export declare class ApiClient {
             r2Key: string;
         }>;
     }>;
-    uploadTestCaseAttachment(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, testCaseId: string, filename: string, data: Buffer, contentType: string): Promise<{
+    uploadTestCaseAttachment(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string, filename: string, data: Buffer, contentType: string): Promise<{
         success: boolean;
         attachment: {
             filename: string;
@@ -575,26 +644,26 @@ export declare class ApiClient {
             r2Key: string;
         };
     }>;
-    downloadTestCaseAttachment(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, testCaseId: string, filename: string): Promise<{
+    downloadTestCaseAttachment(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string, filename: string): Promise<{
         data: Buffer;
         contentType: string;
     }>;
-    deleteTestCaseAttachment(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, testCaseId: string, filename: string): Promise<{
+    deleteTestCaseAttachment(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string, filename: string): Promise<{
         success: boolean;
         deleted: boolean;
     }>;
-    executeBlockTest(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, payload: {
+    executeBlockTest(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, payload: {
         variables?: Record<string, any>;
         testCaseId?: string;
         configId?: string;
         comparisonGroup?: string;
     }): Promise<any>;
-    runAllTestCases(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, payload?: {
+    runAllTestCases(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, payload?: {
         overrideConfigId?: string;
         comparisonGroup?: string;
         testCaseIds?: string[];
     }): Promise<any>;
-    listTestRuns(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, params?: {
+    listTestRuns(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, params?: {
         limit?: number;
         comparisonGroup?: string;
     }): Promise<{
@@ -772,7 +841,7 @@ export declare class ApiClient {
         appId: string;
         workflowId: string;
     }): Promise<any>;
-    startBatchTests(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, payload?: {
+    startBatchTests(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, payload?: {
         comparisonGroup?: string;
         overrideConfigId?: string;
         testCaseIds?: string[];
@@ -782,7 +851,7 @@ export declare class ApiClient {
         instanceIds: string[];
         errors?: any[];
     }>;
-    getBatchTestStatus(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, batchId: string): Promise<{
+    getBatchTestStatus(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, batchId: string): Promise<{
         status: string;
         batchId: string;
         completed: number;
@@ -799,7 +868,7 @@ export declare class ApiClient {
             endedAt?: string;
         }>;
     }>;
-    cancelBatchTests(appId: string, blockType: "prompt" | "integration" | "workflow", blockId: string, batchId: string, instanceIds: string[]): Promise<{
+    cancelBatchTests(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, batchId: string, instanceIds: string[]): Promise<{
         batchId: string;
         terminated: string[];
         errors?: any[];
@@ -871,6 +940,7 @@ export declare class ApiClient {
         title: string;
         databaseType?: string;
         metadata?: Record<string, any> | string;
+        initialMetadata?: Record<string, Record<string, unknown>>;
     }): Promise<any>;
     getDatabase(appId: string, databaseId: string): Promise<any>;
     updateDatabase(appId: string, databaseId: string, data: Record<string, any>): Promise<any>;
@@ -968,6 +1038,7 @@ export declare class ApiClient {
         autoPopulatedFields?: Record<string, any> | null;
         timestamps?: Record<string, any> | null;
         schema?: string | null;
+        metadataManifest?: any;
     }): Promise<any>;
     updateDatabaseTypeConfig(appId: string, databaseType: string, data: {
         ruleSetId?: string | null;
@@ -979,11 +1050,14 @@ export declare class ApiClient {
         schema?: string | null;
         pendingOpDeletes?: string[];
         finalOpNames?: string[];
+        metadataManifest?: any;
     }, expectedModifiedAt?: string, options?: {
         dryRun?: boolean;
         acceptWarnings?: boolean;
     }): Promise<any>;
-    deleteDatabaseTypeConfig(appId: string, databaseType: string): Promise<any>;
+    deleteDatabaseTypeConfig(appId: string, databaseType: string, options?: {
+        force?: boolean;
+    }): Promise<any>;
     /**
      * Issue #666 Phase 3: ask the server to scaffold a TOML schema from
      * existing ops + DO field introspection. Read-only — does NOT persist.
@@ -1036,7 +1110,7 @@ export declare class ApiClient {
     }>;
     createGroup(appId: string, data: {
         groupType: string;
-        groupId: string;
+        groupId?: string;
         name: string;
         description?: string;
     }): Promise<any>;
@@ -1046,7 +1120,9 @@ export declare class ApiClient {
         description?: string;
     }): Promise<any>;
     deleteGroup(appId: string, groupType: string, groupId: string): Promise<any>;
-    listGroupMembers(appId: string, groupType: string, groupId: string): Promise<{
+    listGroupMembers(appId: string, groupType: string, groupId: string, options?: {
+        include?: "profiles";
+    }): Promise<{
         items: any[];
         cursor?: string;
     }>;
@@ -1080,6 +1156,7 @@ export declare class ApiClient {
     createCollection(appId: string, data: {
         name: string;
         description?: string;
+        initialMetadata?: Record<string, Record<string, unknown>>;
     }): Promise<any>;
     getCollection(appId: string, collectionId: string): Promise<any>;
     updateCollection(appId: string, collectionId: string, data: {
@@ -1122,11 +1199,32 @@ export declare class ApiClient {
     createCollectionTypeConfig(appId: string, data: {
         collectionType: string;
         ruleSetId?: string;
+        metadataManifest?: any;
     }): Promise<any>;
     updateCollectionTypeConfig(appId: string, collectionType: string, data: {
         ruleSetId?: string | null;
+        metadataManifest?: any;
     }, expectedModifiedAt?: string): Promise<any>;
     deleteCollectionTypeConfig(appId: string, collectionType: string): Promise<any>;
+    /**
+     * List all metadata category configs for an app. The route returns
+     * `{ configs: [...] }`; unwrap to a bare array to match the other
+     * `list*Configs` helpers.
+     */
+    listMetadataCategoryConfigs(appId: string): Promise<any[]>;
+    getMetadataCategoryConfig(appId: string, resourceType: string, category: string): Promise<any>;
+    /**
+     * Create or replace a metadata category config (idempotent upsert via the
+     * path-addressed PUT route). `resourceType` / `category` identify the config;
+     * the body carries `schema` / `readRule` / `writeRule` / `description`.
+     */
+    upsertMetadataCategoryConfig(appId: string, resourceType: string, category: string, data: {
+        schema: unknown;
+        readRule?: string | null;
+        writeRule?: string | null;
+        description?: string | null;
+        metadataManifest?: unknown;
+    }): Promise<any>;
     listRuleSets(appId: string, params?: {
         resourceType?: string;
     }): Promise<any[]>;
@@ -1144,6 +1242,9 @@ export declare class ApiClient {
     }, expectedModifiedAt?: string): Promise<any>;
     deleteRuleSet(appId: string, ruleSetId: string): Promise<any>;
     getRuleSetSchema(appId: string): Promise<any>;
+    getRuleSetResourceTypes(appId: string): Promise<{
+        resourceTypes: string[];
+    }>;
     testRuleSet(appId: string, ruleSetId: string, data: any): Promise<any>;
     debugRuleSet(appId: string, data: any): Promise<any>;
     listGroupTypeConfigs(appId: string): Promise<any[]>;
@@ -1152,10 +1253,12 @@ export declare class ApiClient {
         groupType: string;
         ruleSetId?: string;
         autoAddCreator?: boolean;
+        metadataManifest?: any;
     }): Promise<any>;
     updateGroupTypeConfig(appId: string, groupType: string, data: {
         ruleSetId?: string | null;
         autoAddCreator?: boolean;
+        metadataManifest?: any;
     }, expectedModifiedAt?: string): Promise<any>;
     deleteGroupTypeConfig(appId: string, groupType: string): Promise<any>;
     exportDocumentState(appId: string, documentId: string): Promise<{
@@ -1189,7 +1292,7 @@ export declare class ApiClient {
     findUserByEmail(appId: string, email: string): Promise<any | null>;
     listAdminDocuments(appId: string, userId: string): Promise<any[]>;
     saveDatabaseRecord(appId: string, databaseId: string, modelName: string, id: string, data: any): Promise<any>;
-    batchDatabaseRecords(appId: string, databaseId: string, operations: any[]): Promise<any>;
+    batchDatabaseRecords(appId: string, databaseId: string, operations: DatabaseBatchOperation[]): Promise<any>;
     deleteDatabaseRecord(appId: string, databaseId: string, modelName: string, id: string): Promise<any>;
     batchDeleteDatabaseRecords(appId: string, databaseId: string, operations: {
         op: "delete";
@@ -1223,6 +1326,7 @@ export declare class ApiClient {
     }): Promise<any>;
     downloadBucketBlob(appId: string, bucketIdOrKey: string, blobId: string): Promise<Buffer>;
     deleteBucketBlob(appId: string, bucketIdOrKey: string, blobId: string): Promise<any>;
+    deleteBucketBlobs(appId: string, bucketIdOrKey: string, blobIds: string[]): Promise<any>;
     getBucketBlobSignedUrl(appId: string, bucketIdOrKey: string, blobId: string, expiresInSeconds?: number): Promise<any>;
 }
 export declare const apiClient: ApiClient;

package/dist/src/lib/api-client.js

@@ -510,6 +510,43 @@ export class ApiClient {
         return this.delete(`/admin/api/apps/${appId}/secrets/${secretId}`);
     }
     // ============================================
+    // APP CONFIG VARS (issue #1364 — non-secret twin of secrets)
+    // ============================================
+    async listAppConfigVars(appId) {
+        const result = await this.get(`/admin/api/apps/${appId}/vars`);
+        return result?.items ?? [];
+    }
+    async upsertAppConfigVar(appId, key, payload, expectedModifiedAt, options = {}) {
+        // Encode the key so a malformed one (e.g. containing "/") reaches the
+        // server's key validation (400) instead of producing a routing 404.
+        // `expectedModifiedAt` (issue #1423 review r-2 P1) is the optimistic-
+        // concurrency precondition for an UPDATE — the server rejects the write
+        // with a 409 CONFLICT (surfaced as `ConflictError`) if the var changed
+        // since it.
+        //
+        // `expectNotExists` (issue #1423 review r-3 P1a) is the create-only
+        // precondition. A create has no baseline timestamp to send, but without
+        // any precondition the by-key upsert silently overwrites a var created
+        // remotely since our snapshot. Setting `expectNotExists` makes the server
+        // 409 CONFLICT if the key already exists instead of overwriting it.
+        const body = { ...payload };
+        if (expectedModifiedAt !== undefined)
+            body.expectedModifiedAt = expectedModifiedAt;
+        if (options.expectNotExists)
+            body.expectNotExists = true;
+        return this.put(`/admin/api/apps/${appId}/vars/by-key/${encodeURIComponent(key)}`, body);
+    }
+    async deleteAppConfigVar(appId, key, expectedModifiedAt) {
+        // The DELETE carries the optimistic-concurrency precondition (issue #1423
+        // review r-2 P1) as a query param since it has no body; the server 409s
+        // (ConflictError) if the var was edited remotely since `expectedModifiedAt`.
+        let path = `/admin/api/apps/${appId}/vars/by-key/${encodeURIComponent(key)}`;
+        if (expectedModifiedAt !== undefined) {
+            path += `?expectedModifiedAt=${encodeURIComponent(expectedModifiedAt)}`;
+        }
+        return this.delete(path);
+    }
+    // ============================================
     // WEBHOOKS
     // ============================================
     async listWebhooks(appId, params) {
@@ -571,6 +608,49 @@ export class ApiClient {
         return this.post(`/app/${appId}/api/cron-triggers/${triggerId}/test`, {});
     }
     // ============================================
+    // ITERATIONS (iterate-users introspection / reset — #1209)
+    // ============================================
+    async listIterations(appId) {
+        const result = await this.get(`/app/${appId}/api/iterations`);
+        return { items: result?.items ?? [] };
+    }
+    async getIteration(appId, iterationName) {
+        return this.get(`/app/${appId}/api/iterations/${encodeURIComponent(iterationName)}`);
+    }
+    async resetIteration(appId, iterationName) {
+        return this.post(`/app/${appId}/api/iterations/${encodeURIComponent(iterationName)}/reset`, {});
+    }
+    // ============================================
+    // RESOURCE METADATA (values — issue #1352)
+    // ============================================
+    async readResourceMetadata(appId, resourceType, resourceId, category) {
+        return this.get(`/app/${appId}/api/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata/${encodeURIComponent(category)}`);
+    }
+    async writeResourceMetadata(appId, resourceType, resourceId, category, data) {
+        return this.put(`/app/${appId}/api/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata/${encodeURIComponent(category)}`, { data });
+    }
+    async batchReadResourceMetadata(appId, requests) {
+        return this.post(`/app/${appId}/api/resources/metadata/batch`, {
+            requests,
+        });
+    }
+    /**
+     * List every stored metadata category on one resource (issue #1402 — debug
+     * tooling). The CLI authenticates as a console admin, so the app-level
+     * owner/admin bypass returns every category regardless of its readRule.
+     */
+    async listResourceMetadata(appId, resourceType, resourceId) {
+        return this.get(`/app/${appId}/api/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata`);
+    }
+    /**
+     * Delete one resource's metadata for one category (issue #1402 — debug
+     * tooling). Idempotent: deleting an absent item succeeds with
+     * `deleted: false` rather than a 404.
+     */
+    async deleteResourceMetadata(appId, resourceType, resourceId, category) {
+        return this.delete(`/app/${appId}/api/resources/${encodeURIComponent(resourceType)}/${encodeURIComponent(resourceId)}/metadata/${encodeURIComponent(category)}`);
+    }
+    // ============================================
     // PROMPTS
     // ============================================
     async listPrompts(appId, params) {
@@ -640,6 +720,18 @@ export class ApiClient {
     async getScript(appId, scriptId) {
         return this.get(`/admin/api/apps/${appId}/scripts/${scriptId}`);
     }
+    /**
+     * List a script's versioned configs (the `ScriptConfig` rows). Each config
+     * is a distinct block version: `configId` is the stable version selector,
+     * `contentHash` is its content identity, and `status` reports whether it is
+     * `active`/`draft`/`archived`. The script header's `activeConfigId` names
+     * the live version. Used by `scripts configs list` and by the script test
+     * commands to run against a specific pinned version.
+     */
+    async listScriptConfigs(appId, scriptId) {
+        const result = await this.get(`/admin/api/apps/${appId}/scripts/${scriptId}/configs`);
+        return { items: result?.items ?? [] };
+    }
     async createScript(appId, payload) {
         // Mints the script header + a default `active` config carrying the body.
         return this.post(`/admin/api/apps/${appId}/scripts`, payload);
@@ -1252,8 +1344,9 @@ export class ApiClient {
         const path = `/app/${appId}/api/databases/types/${encodeURIComponent(databaseType)}${query ? `?${query}` : ""}`;
         return this.patch(path, body);
     }
-    async deleteDatabaseTypeConfig(appId, databaseType) {
-        return this.delete(`/app/${appId}/api/databases/types/${encodeURIComponent(databaseType)}`);
+    async deleteDatabaseTypeConfig(appId, databaseType, options) {
+        const query = options?.force ? "?force=true" : "";
+        return this.delete(`/app/${appId}/api/databases/types/${encodeURIComponent(databaseType)}${query}`);
     }
     /**
      * Issue #666 Phase 3: ask the server to scaffold a TOML schema from
@@ -1363,8 +1456,9 @@ export class ApiClient {
     // ============================================
     // GROUP MEMBERS
     // ============================================
-    async listGroupMembers(appId, groupType, groupId) {
-        return this.get(`/app/${appId}/api/groups/${groupType}/${groupId}/members`);
+    async listGroupMembers(appId, groupType, groupId, options) {
+        const qs = options?.include ? `?include=${options.include}` : "";
+        return this.get(`/app/${appId}/api/groups/${groupType}/${groupId}/members${qs}`);
     }
     async addGroupMember(appId, groupType, groupId, data) {
         return this.post(`/app/${appId}/api/groups/${groupType}/${groupId}/members`, data);
@@ -1510,6 +1604,29 @@ export class ApiClient {
         return this.delete(`/app/${appId}/api/collection-type-configs/${collectionType}`);
     }
     // ============================================
+    // METADATA CATEGORY CONFIGS (issue #1304, P-B)
+    // ============================================
+    /**
+     * List all metadata category configs for an app. The route returns
+     * `{ configs: [...] }`; unwrap to a bare array to match the other
+     * `list*Configs` helpers.
+     */
+    async listMetadataCategoryConfigs(appId) {
+        const res = await this.get(`/app/${appId}/api/metadata-categories`);
+        return Array.isArray(res?.configs) ? res.configs : [];
+    }
+    async getMetadataCategoryConfig(appId, resourceType, category) {
+        return this.get(`/app/${appId}/api/metadata-categories/${encodeURIComponent(resourceType)}/${encodeURIComponent(category)}`);
+    }
+    /**
+     * Create or replace a metadata category config (idempotent upsert via the
+     * path-addressed PUT route). `resourceType` / `category` identify the config;
+     * the body carries `schema` / `readRule` / `writeRule` / `description`.
+     */
+    async upsertMetadataCategoryConfig(appId, resourceType, category, data) {
+        return this.put(`/app/${appId}/api/metadata-categories/${encodeURIComponent(resourceType)}/${encodeURIComponent(category)}`, data);
+    }
+    // ============================================
     // ACCESS RULE SETS
     // ============================================
     async listRuleSets(appId, params) {
@@ -1531,6 +1648,9 @@ export class ApiClient {
     async getRuleSetSchema(appId) {
         return this.get(`/app/${appId}/api/rule-sets/schema`);
     }
+    async getRuleSetResourceTypes(appId) {
+        return this.get(`/app/${appId}/api/rule-sets/resource-types`);
+    }
     async testRuleSet(appId, ruleSetId, data) {
         return this.post(`/app/${appId}/api/rule-sets/${ruleSetId}/test`, data);
     }
@@ -1738,6 +1858,10 @@ export class ApiClient {
     async deleteBucketBlob(appId, bucketIdOrKey, blobId) {
         return this.delete(`/app/${appId}/api/blob-buckets/${encodeURIComponent(bucketIdOrKey)}/blobs/${blobId}`);
     }
+    // Batch delete (#1455): one round-trip for N ids via POST .../blobs/delete.
+    async deleteBucketBlobs(appId, bucketIdOrKey, blobIds) {
+        return this.post(`/app/${appId}/api/blob-buckets/${encodeURIComponent(bucketIdOrKey)}/blobs/delete`, { blobIds });
+    }
     async getBucketBlobSignedUrl(appId, bucketIdOrKey, blobId, expiresInSeconds) {
         return this.post(`/app/${appId}/api/blob-buckets/${encodeURIComponent(bucketIdOrKey)}/blobs/${blobId}/signed-url`, {
             expiresInSeconds: expiresInSeconds || 300,