primitive-admin 1.0.59 → 1.0.61

package/dist/src/lib/api-client.d.ts

@@ -1,3 +1,20 @@
+/**
+ * Metadata for a single bucket blob, as returned by the metadata endpoint
+ * `GET blob-buckets/:bucketId/blobs/:blobId/metadata`. Mirrors the published
+ * JS client's `BlobInfo` shape.
+ */
+export interface BlobInfo {
+    blobId: string;
+    bucketId: string;
+    filename: string | null;
+    contentType: string | null;
+    numBytes: number;
+    sha256: string | null;
+    tags: string[];
+    createdBy: string | null;
+    uploaded?: string | null;
+    etag?: string | null;
+}
 export declare class ApiError extends Error {
     statusCode: number;
     code?: string;
@@ -262,6 +279,22 @@ interface AnalyticsEventsGroupedResponse {
     rows: AnalyticsGroupedRow[];
     _timing: AnalyticsTiming;
 }
+interface AnalyticsErrorGroupRow {
+    fingerprint: string;
+    normalized_title: string;
+    source: string;
+    status_class: string;
+    total: number;
+    daily: Array<{
+        day: string;
+        count: number;
+    }>;
+}
+interface AnalyticsErrorsGroupsResponse {
+    window_days: number;
+    rows: AnalyticsErrorGroupRow[];
+    _timing: AnalyticsTiming;
+}
 interface AnalyticsIntegrationMetric {
     integrationKey: string;
     invocations: number;
@@ -379,6 +412,9 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        nextCursor?: string;
+        hasMore?: boolean;
+        /** @deprecated Alias of `nextCursor` (#1316). */
         cursor?: string;
     }>;
     createInvitation(appId: string, data: {
@@ -405,9 +441,11 @@ export declare class ApiClient {
         type?: string;
         email?: string;
         limit?: number;
+        cursor?: string;
     }): Promise<{
         grants: any[];
         nextCursor?: string | null;
+        hasMore?: boolean;
     }>;
     revokeDeferredGrant(appId: string, deferredId: string, type: string): Promise<any>;
     listIntegrations(appId: string, params?: {
@@ -482,7 +520,38 @@ export declare class ApiClient {
     listWebhookEvents(appId: string, webhookId: string, params?: {
         limit?: number;
     }): Promise<any>;
+    /**
+     * List the live connections the server believes exist for exactly one of a
+     * document, user, or database. Read-only inspection over admin-api. Rows are
+     * per-connection-×-subscription bindings, so `connectionId` is not unique
+     * across rows. `params` on a database-subscription row is caller-defined
+     * bound CEL input — typed `unknown`.
+     */
+    listConnections(appId: string, selector: {
+        documentId?: string;
+        userId?: string;
+        databaseId?: string;
+    }, params?: {
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        items: unknown[];
+        nextCursor?: string | null;
+    }>;
+    listSessions(appId: string, userId: string, params?: {
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        items: unknown[];
+        nextCursor?: string | null;
+    }>;
     testWebhook(appId: string, webhookId: string, payload?: any): Promise<any>;
+    listLocks(appId: string): Promise<{
+        locks: any[];
+    }>;
+    getLockStatus(appId: string, key: string): Promise<any>;
+    acquireLock(appId: string, key: string, ttlMs: number): Promise<any>;
+    releaseLock(appId: string, key: string, handleId: string): Promise<any>;
     listCronTriggers(appId: string): Promise<{
         items: any[];
     }>;
@@ -710,6 +779,8 @@ export declare class ApiClient {
         forward?: boolean;
     }): Promise<{
         items: any[];
+        nextCursor?: string | null;
+        /** @deprecated Alias of `nextCursor` (#1316). */
         cursor?: string | null;
     }>;
     getWorkflowRunStatus(appId: string, workflowId: string, runId: string): Promise<any>;
@@ -785,6 +856,11 @@ export declare class ApiClient {
         windowDays?: number;
         [key: string]: any;
     }): Promise<AnalyticsEventsGroupedResponse>;
+    getAnalyticsErrorsGroups(appId: string, params?: {
+        windowDays?: number;
+        limit?: number;
+        [key: string]: any;
+    }): Promise<AnalyticsErrorsGroupsResponse>;
     getAnalyticsTopWorkflows(appId: string, params?: {
         windowDays?: number;
         limit?: number;
@@ -1050,6 +1126,8 @@ export declare class ApiClient {
         timestamps?: Record<string, any> | null;
         schema?: string | null;
         metadataManifest?: any;
+    }, options?: {
+        dryRun?: boolean;
     }): Promise<any>;
     updateDatabaseTypeConfig(appId: string, databaseType: string, data: {
         ruleSetId?: string | null;
@@ -1062,6 +1140,11 @@ export declare class ApiClient {
         pendingOpDeletes?: string[];
         finalOpNames?: string[];
         metadataManifest?: any;
+        pendingOpUpdates?: Array<{
+            name: string;
+            access?: string | null;
+            params?: Record<string, any> | null;
+        }>;
     }, expectedModifiedAt?: string, options?: {
         dryRun?: boolean;
         acceptWarnings?: boolean;
@@ -1089,10 +1172,12 @@ export declare class ApiClient {
         dryRun?: boolean;
         schemaOverride?: string | null;
         defaultAccess?: string | null;
+        metadataManifestOverride?: Record<string, any> | null;
     }): Promise<any>;
     updateDatabaseTypeOperation(appId: string, databaseType: string, name: string, data: Record<string, any>, expectedModifiedAt?: string, options?: {
         dryRun?: boolean;
         schemaOverride?: string | null;
+        metadataManifestOverride?: Record<string, any> | null;
     }): Promise<any>;
     deleteDatabaseTypeOperation(appId: string, databaseType: string, name: string): Promise<any>;
     listDatabaseTypeSubscriptions(appId: string, databaseType: string): Promise<any[]>;
@@ -1117,6 +1202,9 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        nextCursor?: string;
+        hasMore?: boolean;
+        /** @deprecated Alias of `nextCursor` (#1316). */
         cursor?: string;
     }>;
     createGroup(appId: string, data: {
@@ -1135,6 +1223,9 @@ export declare class ApiClient {
         include?: "profiles";
     }): Promise<{
         items: any[];
+        nextCursor?: string;
+        hasMore?: boolean;
+        /** @deprecated Alias of `nextCursor` (#1316). */
         cursor?: string;
     }>;
     addGroupMember(appId: string, groupType: string, groupId: string, data: {
@@ -1345,6 +1436,9 @@ export declare class ApiClient {
         limit?: number;
     }): Promise<{
         items: any[];
+        nextCursor?: string;
+        hasMore?: boolean;
+        /** @deprecated Alias of `nextCursor` (#1316). */
         cursor?: string;
     }>;
     uploadBucketBlob(appId: string, bucketIdOrKey: string, data: Buffer, meta: {
@@ -1356,6 +1450,7 @@ export declare class ApiClient {
     deleteBucketBlob(appId: string, bucketIdOrKey: string, blobId: string): Promise<any>;
     deleteBucketBlobs(appId: string, bucketIdOrKey: string, blobIds: string[]): Promise<any>;
     getBucketBlobSignedUrl(appId: string, bucketIdOrKey: string, blobId: string, expiresInSeconds?: number): Promise<any>;
+    getBucketBlobMetadata(appId: string, bucketIdOrKey: string, blobId: string): Promise<BlobInfo>;
 }
 export declare const apiClient: ApiClient;
 export {};

package/dist/src/lib/api-client.js

@@ -313,7 +313,14 @@ export class ApiClient {
             if (cursor)
                 qs.set("cursor", cursor);
             const resp = await this.get(`/admin/api/admins/me/apps?${qs.toString()}`);
-            return { items: Array.isArray(resp.apps) ? resp.apps : [], nextCursor: resp.nextCursor };
+            // The server now emits `items` with `apps` as a deprecation-window
+            // alias (#1316). Read `items` first so listings keep working once the
+            // alias is removed; fall back to the legacy `apps` key meanwhile.
+            return {
+                items: resp.items ??
+                    (Array.isArray(resp.apps) ? resp.apps : []),
+                nextCursor: resp.nextCursor ?? resp.cursor,
+            };
         });
         return { apps };
     }
@@ -403,7 +410,16 @@ export class ApiClient {
     // INVITATIONS
     // ============================================
     async listInvitations(appId, params) {
-        return this.get(`/app/${appId}/api/invitations`, params);
+        const result = await this.get(`/app/${appId}/api/invitations`, params);
+        // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias
+        // so the CLI keeps paginating against pre-#1316 servers.
+        const nextCursor = result?.nextCursor ?? result?.cursor;
+        return {
+            items: result?.items ?? [],
+            nextCursor,
+            hasMore: result?.hasMore ?? nextCursor != null,
+            cursor: nextCursor,
+        };
     }
     async createInvitation(appId, data) {
         return this.post(`/app/${appId}/api/invitations`, data);
@@ -433,8 +449,9 @@ export class ApiClient {
     async listDeferredGrants(appId, params) {
         const result = await this.get(`/app/${appId}/api/deferred-grants`, params);
         return {
-            grants: result?.grants ?? [],
+            grants: result?.grants ?? result?.items ?? [],
             nextCursor: result?.nextCursor ?? null,
+            hasMore: result?.hasMore,
         };
     }
     async revokeDeferredGrant(appId, deferredId, type) {
@@ -576,10 +593,59 @@ export class ApiClient {
         const result = await this.get(`/admin/api/apps/${appId}/webhooks/${webhookId}/events`, params);
         return result;
     }
+    // ============================================
+    // CONNECTIONS INSPECTION (#1968)
+    // ============================================
+    /**
+     * List the live connections the server believes exist for exactly one of a
+     * document, user, or database. Read-only inspection over admin-api. Rows are
+     * per-connection-×-subscription bindings, so `connectionId` is not unique
+     * across rows. `params` on a database-subscription row is caller-defined
+     * bound CEL input — typed `unknown`.
+     */
+    async listConnections(appId, selector, params) {
+        const result = await this.get(`/admin/api/apps/${appId}/connections`, {
+            ...selector,
+            ...params,
+        });
+        return {
+            items: result?.items ?? [],
+            nextCursor: result?.nextCursor ?? null,
+        };
+    }
+    async listSessions(appId, userId, params) {
+        const result = await this.get(`/admin/api/apps/${appId}/sessions`, {
+            userId,
+            ...params,
+        });
+        return {
+            items: result?.items ?? [],
+            nextCursor: result?.nextCursor ?? null,
+        };
+    }
     async testWebhook(appId, webhookId, payload) {
         return this.post(`/admin/api/apps/${appId}/webhooks/${webhookId}/test`, payload || {});
     }
     // ============================================
+    // NAMED LOCKS (#1518)
+    // ============================================
+    async listLocks(appId) {
+        const result = await this.get(`/app/${appId}/api/locks`);
+        return { locks: result?.locks ?? [] };
+    }
+    async getLockStatus(appId, key) {
+        return this.post(`/app/${appId}/api/locks/status`, { key });
+    }
+    async acquireLock(appId, key, ttlMs) {
+        return this.post(`/app/${appId}/api/locks/acquire`, { key, ttlMs });
+    }
+    async releaseLock(appId, key, handleId) {
+        return this.post(`/app/${appId}/api/locks/release`, {
+            key,
+            handle: { handleId },
+        });
+    }
+    // ============================================
     // CRON TRIGGERS
     // ============================================
     async listCronTriggers(appId) {
@@ -933,9 +999,12 @@ export class ApiClient {
     }
     async listWorkflowRuns(appId, workflowId, params) {
         const result = await this.get(`/admin/api/apps/${appId}/workflows/${workflowId}/runs`, params);
+        // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias.
+        const nextCursor = result?.nextCursor ?? result?.cursor ?? null;
         return {
             items: result?.items ?? [],
-            cursor: result?.cursor ?? null,
+            nextCursor,
+            cursor: nextCursor,
         };
     }
     async getWorkflowRunStatus(appId, workflowId, runId) {
@@ -1021,6 +1090,9 @@ export class ApiClient {
     async getAnalyticsEventsGrouped(appId, params) {
         return this.get(`/app/${appId}/api/analytics/events/grouped`, params);
     }
+    async getAnalyticsErrorsGroups(appId, params) {
+        return this.get(`/app/${appId}/api/analytics/errors/groups`, params);
+    }
     async getAnalyticsTopWorkflows(appId, params) {
         return this.get(`/app/${appId}/api/analytics/workflows/top`, params);
     }
@@ -1032,9 +1104,12 @@ export class ApiClient {
     // ============================================
     async listAllAdmins(params) {
         const result = await this.get("/admin/api/admins", params);
+        // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias.
+        const nextCursor = result?.nextCursor ?? result?.cursor ?? null;
         return {
-            admins: result?.admins ?? [],
-            cursor: result?.cursor ?? null,
+            admins: result?.admins ?? result?.items ?? [],
+            nextCursor,
+            cursor: nextCursor,
         };
     }
     async searchAdminByEmail(email) {
@@ -1338,8 +1413,14 @@ export class ApiClient {
     async getDatabaseTypeConfig(appId, databaseType) {
         return this.get(`/app/${appId}/api/databases/types/${encodeURIComponent(databaseType)}`);
     }
-    async createDatabaseTypeConfig(appId, data) {
-        return this.post(`/app/${appId}/api/databases/types`, data);
+    async createDatabaseTypeConfig(appId, data, 
+    // Issue #1336 (codex round-1 P2): `dryRun` runs every create-time
+    // validation (inline CEL rule lint, manifest shape, schema TOML parse)
+    // WITHOUT persisting, so a fresh-type `sync push --dry-run` surfaces a
+    // malformed `defaultAccess`/manifest the same way the real POST would.
+    options) {
+        const query = options?.dryRun ? "?dryRun=true" : "";
+        return this.post(`/app/${appId}/api/databases/types${query}`, data);
     }
     async updateDatabaseTypeConfig(appId, databaseType, data, expectedModifiedAt, options) {
         const body = expectedModifiedAt ? { ...data, expectedModifiedAt } : data;
@@ -1394,16 +1475,24 @@ export class ApiClient {
         if (options?.dryRun && options.defaultAccess !== undefined) {
             body = { ...body, defaultAccess: options.defaultAccess };
         }
+        if (options?.dryRun && options.metadataManifestOverride !== undefined) {
+            body = { ...body, metadataManifestOverride: options.metadataManifestOverride };
+        }
         return this.post(`/app/${appId}/api/databases/types/${encodeURIComponent(databaseType)}/operations${query}`, body);
     }
     async updateDatabaseTypeOperation(appId, databaseType, name, data, expectedModifiedAt, 
     // Issue #813 (1A): dry-run runs the op-edit gate without persisting.
     // `schemaOverride` gates against the schema the same push is landing.
+    // Issue #1336: `metadataManifestOverride` gates the op-access lint against
+    // the manifest the same push is landing (see `createDatabaseTypeOperation`).
     options) {
         let body = expectedModifiedAt ? { ...data, expectedModifiedAt } : { ...data };
         if (options?.dryRun && options.schemaOverride !== undefined) {
             body = { ...body, schemaOverride: options.schemaOverride };
         }
+        if (options?.dryRun && options.metadataManifestOverride !== undefined) {
+            body = { ...body, metadataManifestOverride: options.metadataManifestOverride };
+        }
         const query = options?.dryRun ? "?dryRun=true" : "";
         return this.patch(`/app/${appId}/api/databases/types/${encodeURIComponent(databaseType)}/operations/${encodeURIComponent(name)}${query}`, body);
     }
@@ -1447,7 +1536,16 @@ export class ApiClient {
     // GROUPS
     // ============================================
     async listGroups(appId, params) {
-        return this.get(`/app/${appId}/api/groups`, params);
+        const result = await this.get(`/app/${appId}/api/groups`, params);
+        // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias
+        // so the CLI keeps paginating against pre-#1316 servers.
+        const nextCursor = result?.nextCursor ?? result?.cursor;
+        return {
+            items: result?.items ?? [],
+            nextCursor,
+            hasMore: result?.hasMore ?? nextCursor != null,
+            cursor: nextCursor,
+        };
     }
     async createGroup(appId, data) {
         return this.post(`/app/${appId}/api/groups`, data);
@@ -1466,7 +1564,16 @@ export class ApiClient {
     // ============================================
     async listGroupMembers(appId, groupType, groupId, options) {
         const qs = options?.include ? `?include=${options.include}` : "";
-        return this.get(`/app/${appId}/api/groups/${groupType}/${groupId}/members${qs}`);
+        const result = await this.get(`/app/${appId}/api/groups/${groupType}/${groupId}/members${qs}`);
+        // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias
+        // so the CLI keeps paginating against pre-#1316 servers.
+        const nextCursor = result?.nextCursor ?? result?.cursor;
+        return {
+            items: result?.items ?? [],
+            nextCursor,
+            hasMore: result?.hasMore ?? nextCursor != null,
+            cursor: nextCursor,
+        };
     }
     async addGroupMember(appId, groupType, groupId, data) {
         return this.post(`/app/${appId}/api/groups/${groupType}/${groupId}/members`, data);
@@ -1511,7 +1618,7 @@ export class ApiClient {
         const result = await this.get(`/app/${appId}/api/collections${q ? `?${q}` : ""}`);
         return {
             items: result?.items ?? [],
-            nextCursor: result?.cursor ?? null,
+            nextCursor: result?.nextCursor ?? result?.cursor ?? null,
         };
     }
     async listAllCollections(appId, params) {
@@ -1524,7 +1631,7 @@ export class ApiClient {
         const result = await this.get(`/app/${appId}/api/admin/collections${q ? `?${q}` : ""}`);
         return {
             items: result?.items ?? [],
-            nextCursor: result?.cursor ?? null,
+            nextCursor: result?.nextCursor ?? result?.cursor ?? null,
         };
     }
     async createCollection(appId, data) {
@@ -1552,7 +1659,7 @@ export class ApiClient {
         const result = await this.get(`/app/${appId}/api/collections/${collectionId}/documents${q ? `?${q}` : ""}`);
         return {
             items: result?.items ?? [],
-            nextCursor: result?.cursor ?? null,
+            nextCursor: result?.nextCursor ?? result?.cursor ?? null,
         };
     }
     async addCollectionDocument(appId, collectionId, data) {
@@ -1571,7 +1678,7 @@ export class ApiClient {
         const result = await this.get(`/app/${appId}/api/documents/${documentId}/collections${q ? `?${q}` : ""}`);
         return {
             items: result?.items ?? [],
-            nextCursor: result?.cursor ?? null,
+            nextCursor: result?.nextCursor ?? result?.cursor ?? null,
         };
     }
     // ============================================
@@ -1841,7 +1948,16 @@ export class ApiClient {
         return this.delete(`/app/${appId}/api/blob-buckets/${encodeURIComponent(bucketIdOrKey)}`);
     }
     async listBucketBlobs(appId, bucketIdOrKey, params) {
-        return this.get(`/app/${appId}/api/blob-buckets/${encodeURIComponent(bucketIdOrKey)}/blobs`, params);
+        const result = await this.get(`/app/${appId}/api/blob-buckets/${encodeURIComponent(bucketIdOrKey)}/blobs`, params);
+        // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias
+        // so the CLI keeps paginating against pre-#1316 servers.
+        const nextCursor = result?.nextCursor ?? result?.cursor;
+        return {
+            items: result?.items ?? [],
+            nextCursor,
+            hasMore: result?.hasMore ?? nextCursor != null,
+            cursor: nextCursor,
+        };
     }
     async uploadBucketBlob(appId, bucketIdOrKey, data, meta) {
         const credentials = await this.ensureAuthenticated();
@@ -1896,6 +2012,12 @@ export class ApiClient {
             expiresInSeconds: expiresInSeconds || 300,
         });
     }
+    // Blob metadata (#1966): head a single blob without downloading its bytes.
+    // Mirrors listBucketBlobs/downloadBucketBlob addressing; the server heads the
+    // R2 object and returns the serialized BlobInfo shape.
+    async getBucketBlobMetadata(appId, bucketIdOrKey, blobId) {
+        return this.get(`/app/${appId}/api/blob-buckets/${encodeURIComponent(bucketIdOrKey)}/blobs/${blobId}/metadata`);
+    }
 }
 // Export a singleton instance
 export const apiClient = new ApiClient();