primitive-admin 1.1.0-alpha.84 → 1.1.0-alpha.85

package/dist/src/lib/api-client.d.ts

@@ -518,6 +518,34 @@ export declare class ApiClient {
     put<T = any>(path: string, body?: any): Promise<T>;
     patch<T = any>(path: string, body?: any): Promise<T>;
     delete<T = any>(path: string): Promise<T>;
+    /**
+     * One page of the apps the caller can reach.
+     *
+     * The route paginates cursor-style (default pageSize=25, cap=100). This
+     * method used to walk the whole chain so `primitive apps list` could not
+     * truncate at 25 (#436); since #3646 the page boundary belongs to the
+     * caller instead — `apps list` declares `--limit`/`--cursor` and prints the
+     * `hasMore`/`nextCursor` the server reported, and the aggregate readers that
+     * really do mean "every app" call `listAllApps()`.
+     */
+    listAppsPage(params?: {
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        items: Array<{
+            id: string;
+            name: string;
+            role?: string;
+        }>;
+        hasMore?: boolean;
+        nextCursor?: string | null;
+    }>;
+    /**
+     * Every app the caller can reach, cursor chain walked (#436).
+     *
+     * For readers that genuinely need the whole set — an app picker, a sweep —
+     * rather than the one page `apps list` prints.
+     */
     listApps(): Promise<{
         apps: Array<{
             id: string;
@@ -568,6 +596,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     removeUser(appId: string, userId: string): Promise<void>;
@@ -642,6 +671,7 @@ export declare class ApiClient {
         limit?: number;
         cursor?: string;
     }): Promise<{
+        items: any[];
         grants: any[];
         nextCursor?: string | null;
         hasMore?: boolean;
@@ -653,6 +683,7 @@ export declare class ApiClient {
         limit?: number;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     /** Integration detail (#2631: `accessRule` is on the detail, not the list summary). */
@@ -716,6 +747,7 @@ export declare class ApiClient {
         limit?: number;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     getWebhook(appId: string, webhookId: string): Promise<any>;
@@ -939,6 +971,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: unknown[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     listSessions(appId: string, userId: string, params?: {
@@ -946,6 +979,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: unknown[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     testWebhook(appId: string, webhookId: string, payload?: any): Promise<any>;
@@ -1045,6 +1079,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     getPrompt(appId: string, promptId: string): Promise<any>;
@@ -1144,6 +1179,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string;
     }>;
     getTestCase(appId: string, blockType: "prompt" | "integration" | "workflow" | "script", blockId: string, testCaseId: string): Promise<any>;
@@ -1222,6 +1258,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     getWorkflow(appId: string, workflowId: string): Promise<any>;
@@ -1566,9 +1603,22 @@ export declare class ApiClient {
      * `options.owner` narrows the result to the databases that user created; the
      * server resolves it through the `databasesByCreator` index (#1965).
      */
+    /**
+     * One page of an app's databases (#3646).
+     *
+     * `databases list` used to walk the chain here. The route pages, so the page
+     * boundary belongs to the caller: the verb declares `--limit`/`--cursor` and
+     * prints what came back.
+     */
     listDatabases(appId: string, options?: {
         owner?: string;
-    }): Promise<any[]>;
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        items: any[];
+        hasMore?: boolean;
+        nextCursor?: string | null;
+    }>;
     createDatabase(appId: string, data: {
         title: string;
         databaseType?: string;
@@ -1823,8 +1873,18 @@ export declare class ApiClient {
         description?: string;
     }): Promise<any>;
     deleteGroup(appId: string, groupType: string, groupId: string): Promise<any>;
+    /**
+     * One page of a group's members.
+     *
+     * The route paginates cursor-style (no default limit, cap 200) and reports
+     * the boundary, so `groups members list` carries `--limit`/`--cursor` and
+     * forwards them (#3646) rather than printing a first page that claims to be
+     * the whole membership.
+     */
     listGroupMembers(appId: string, groupType: string, groupId: string, options?: {
         include?: "profiles";
+        limit?: number;
+        cursor?: string;
     }): Promise<{
         items: any[];
         nextCursor?: string;
@@ -1850,6 +1910,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     listAllCollections(appId: string, params?: {
@@ -1857,6 +1918,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     createCollection(appId: string, data: {
@@ -1881,6 +1943,7 @@ export declare class ApiClient {
         cursor?: string;
     }): Promise<{
         items: any[];
+        hasMore?: boolean;
         nextCursor?: string | null;
     }>;
     addCollectionDocument(appId: string, collectionId: string, data: {
@@ -2287,6 +2350,25 @@ export declare class ApiClient {
      * `{ documents }` array and no cursor: that reads as a single page.
      */
     listAdminDocuments(appId: string, userId: string): Promise<any[]>;
+    /**
+     * One page of the admin inventory of a user's documents (#3646).
+     *
+     * `documents list --user-id` prints exactly this — the page the caller's
+     * `--limit`/`--cursor` asked for, with the server's own page boundary
+     * beside it. `documents export-all`, which really does mean every document,
+     * keeps the walking `listAdminDocuments()` above.
+     *
+     * Tolerant of a pre-contract server, which answers with a bare
+     * `{ documents }` array and no cursor: that reads as a single page.
+     */
+    listAdminDocumentsPage(appId: string, userId: string, options?: {
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        items: any[];
+        hasMore?: boolean;
+        nextCursor?: string | null;
+    }>;
     /**
      * The document `AppUser.rootDocId` points at, or null when the user has none
      * yet (#3135). A user who is not a member of the app is a 404, which

package/dist/src/lib/api-client.js

@@ -391,24 +391,43 @@ export class ApiClient {
     // ============================================
     // APPS
     // ============================================
+    /**
+     * One page of the apps the caller can reach.
+     *
+     * The route paginates cursor-style (default pageSize=25, cap=100). This
+     * method used to walk the whole chain so `primitive apps list` could not
+     * truncate at 25 (#436); since #3646 the page boundary belongs to the
+     * caller instead — `apps list` declares `--limit`/`--cursor` and prints the
+     * `hasMore`/`nextCursor` the server reported, and the aggregate readers that
+     * really do mean "every app" call `listAllApps()`.
+     */
+    async listAppsPage(params) {
+        const qs = new URLSearchParams();
+        if (params?.limit !== undefined)
+            qs.set("limit", String(params.limit));
+        if (params?.cursor)
+            qs.set("cursor", params.cursor);
+        const q = qs.toString();
+        const resp = await this.get(`/admin/api/admins/me/apps${q ? `?${q}` : ""}`);
+        // The server now emits `items` with `apps` as a deprecation-window alias
+        // (#1316). Read `items` first so listings keep working once the alias is
+        // removed; fall back to the legacy `apps` key meanwhile.
+        return {
+            items: resp?.items ?? (Array.isArray(resp?.apps) ? resp.apps : []),
+            hasMore: resp?.hasMore,
+            nextCursor: resp?.nextCursor ?? resp?.cursor ?? null,
+        };
+    }
+    /**
+     * Every app the caller can reach, cursor chain walked (#436).
+     *
+     * For readers that genuinely need the whole set — an app picker, a sweep —
+     * rather than the one page `apps list` prints.
+     */
     async listApps() {
-        // The server paginates cursor-style (default pageSize=25, cap=100). Historically
-        // this method issued a single un-paginated GET and silently truncated to the
-        // first page, which broke `primitive apps list` for admins with more than
-        // 25 apps (see #436). Iterate every page.
         const apps = await paginateAll(async (cursor) => {
-            const qs = new URLSearchParams({ limit: "100" });
-            if (cursor)
-                qs.set("cursor", cursor);
-            const resp = await this.get(`/admin/api/admins/me/apps?${qs.toString()}`);
-            // The server now emits `items` with `apps` as a deprecation-window
-            // alias (#1316). Read `items` first so listings keep working once the
-            // alias is removed; fall back to the legacy `apps` key meanwhile.
-            return {
-                items: resp.items ??
-                    (Array.isArray(resp.apps) ? resp.apps : []),
-                nextCursor: resp.nextCursor ?? resp.cursor,
-            };
+            const page = await this.listAppsPage({ limit: 100, cursor });
+            return { items: page.items, nextCursor: page.nextCursor };
         });
         return { apps };
     }
@@ -494,6 +513,9 @@ export class ApiClient {
         const result = await this.get(path);
         return {
             items: result?.items ?? (Array.isArray(result) ? result : []),
+            // `hasMore` travels with the page so the caller prints the server's own
+            // page boundary rather than inferring one from the cursor (#3646).
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -604,8 +626,12 @@ export class ApiClient {
     // ============================================
     async listDeferredGrants(appId, params) {
         const result = await this.get(`/app/${appId}/api/deferred-grants`, params);
+        // `items` is the key every list envelope is built from (#3646); `grants`
+        // stays as the name this route has always used.
+        const items = result?.grants ?? result?.items ?? [];
         return {
-            grants: result?.grants ?? result?.items ?? [],
+            items,
+            grants: items,
             nextCursor: result?.nextCursor ?? null,
             hasMore: result?.hasMore,
         };
@@ -620,6 +646,7 @@ export class ApiClient {
         const result = await this.get(`/admin/api/apps/${appId}/integrations`, params);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -730,6 +757,7 @@ export class ApiClient {
         const result = await this.get(`/admin/api/apps/${appId}/webhooks`, params);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -1011,6 +1039,7 @@ export class ApiClient {
         });
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -1021,6 +1050,7 @@ export class ApiClient {
         });
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -1164,6 +1194,7 @@ export class ApiClient {
         const result = await this.get(`/admin/api/apps/${appId}/prompts`, params);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -1311,6 +1342,7 @@ export class ApiClient {
         const result = await this.get(`/admin/api/apps/${appId}/blocks/${blockType}/${blockId}/test-cases${suffix}`);
         return {
             items: result?.items ?? result ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? undefined,
         };
     }
@@ -1462,6 +1494,7 @@ export class ApiClient {
         const result = await this.get(`/admin/api/apps/${appId}/workflows`, params);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -1653,8 +1686,13 @@ export class ApiClient {
         const result = await this.get("/admin/api/admins", params);
         // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias.
         const nextCursor = result?.nextCursor ?? result?.cursor ?? null;
+        const items = result?.admins ?? result?.items ?? [];
         return {
-            admins: result?.admins ?? result?.items ?? [],
+            // `items` is the key every list envelope is built from (#3646); `admins`
+            // stays as the name this route has always used.
+            items,
+            admins: items,
+            hasMore: result?.hasMore,
             nextCursor,
             cursor: nextCursor,
         };
@@ -1689,6 +1727,7 @@ export class ApiClient {
         const result = await this.get("/admin/api/catalog/prompts", params);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -1708,6 +1747,7 @@ export class ApiClient {
         const result = await this.get("/admin/api/catalog/integrations", params);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? null,
         };
     }
@@ -1799,30 +1839,42 @@ export class ApiClient {
      * `options.owner` narrows the result to the databases that user created; the
      * server resolves it through the `databasesByCreator` index (#1965).
      */
+    /**
+     * One page of an app's databases (#3646).
+     *
+     * `databases list` used to walk the chain here. The route pages, so the page
+     * boundary belongs to the caller: the verb declares `--limit`/`--cursor` and
+     * prints what came back.
+     */
     async listDatabases(appId, options) {
-        return paginateAll(async (cursor) => {
-            const params = new URLSearchParams();
-            if (options?.owner)
-                params.set("owner", options.owner);
-            if (cursor)
-                params.set("cursor", cursor);
-            const qs = params.toString() ? `?${params.toString()}` : "";
-            const resp = await this.get(`/app/${appId}/api/databases${qs}`);
-            // Tolerant read: a server older than #1958 answers with a bare array.
-            // Without this a published CLI pointed at a not-yet-upgraded server
-            // would print nothing at all. Such a server also predates the `owner`
-            // filter (#1965) and ignores the unknown query parameter, so apply the
-            // filter here — the legacy rows carry `createdBy`, so this reproduces
-            // the server's own post-join filter (#2245).
-            if (Array.isArray(resp)) {
-                return {
-                    items: options?.owner
-                        ? resp.filter((db) => db?.createdBy === options.owner)
-                        : resp,
-                };
-            }
-            return { items: resp?.items ?? [], nextCursor: resp?.nextCursor };
-        });
+        const params = new URLSearchParams();
+        if (options?.owner)
+            params.set("owner", options.owner);
+        if (options?.limit !== undefined)
+            params.set("limit", String(options.limit));
+        if (options?.cursor)
+            params.set("cursor", options.cursor);
+        const qs = params.toString() ? `?${params.toString()}` : "";
+        const resp = await this.get(`/app/${appId}/api/databases${qs}`);
+        // Tolerant read: a server older than #1958 answers with a bare array.
+        // Without this a published CLI pointed at a not-yet-upgraded server would
+        // print nothing at all. Such a server also predates the `owner` filter
+        // (#1965) and ignores the unknown query parameter, so apply the filter
+        // here — the legacy rows carry `createdBy`, so this reproduces the
+        // server's own post-join filter (#2245). It has no pages either.
+        if (Array.isArray(resp)) {
+            return {
+                items: options?.owner
+                    ? resp.filter((db) => db?.createdBy === options.owner)
+                    : resp,
+                hasMore: false,
+            };
+        }
+        return {
+            items: resp?.items ?? [],
+            hasMore: resp?.hasMore,
+            nextCursor: resp?.nextCursor ?? null,
+        };
     }
     async createDatabase(appId, data) {
         return this.post(`/app/${appId}/api/databases`, data);
@@ -2206,9 +2258,20 @@ export class ApiClient {
     // ============================================
     // GROUP MEMBERS
     // ============================================
+    /**
+     * One page of a group's members.
+     *
+     * The route paginates cursor-style (no default limit, cap 200) and reports
+     * the boundary, so `groups members list` carries `--limit`/`--cursor` and
+     * forwards them (#3646) rather than printing a first page that claims to be
+     * the whole membership.
+     */
     async listGroupMembers(appId, groupType, groupId, options) {
-        const qs = options?.include ? `?include=${options.include}` : "";
-        const result = await this.get(`/app/${appId}/api/groups/${groupType}/${groupId}/members${qs}`);
+        const result = await this.get(`/app/${appId}/api/groups/${groupType}/${groupId}/members`, {
+            ...(options?.include ? { include: options.include } : {}),
+            ...(options?.limit !== undefined ? { limit: options.limit } : {}),
+            ...(options?.cursor ? { cursor: options.cursor } : {}),
+        });
         // #1316: prefer `nextCursor`; fall back to the deprecated `cursor` alias
         // so the CLI keeps paginating against pre-#1316 servers.
         const nextCursor = result?.nextCursor ?? result?.cursor;
@@ -2262,6 +2325,7 @@ export class ApiClient {
         const result = await this.get(`/app/${appId}/api/collections${q ? `?${q}` : ""}`);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? result?.cursor ?? null,
         };
     }
@@ -2275,6 +2339,7 @@ export class ApiClient {
         const result = await this.get(`/app/${appId}/api/admin/collections${q ? `?${q}` : ""}`);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? result?.cursor ?? null,
         };
     }
@@ -2303,6 +2368,7 @@ export class ApiClient {
         const result = await this.get(`/app/${appId}/api/collections/${collectionId}/documents${q ? `?${q}` : ""}`);
         return {
             items: result?.items ?? [],
+            hasMore: result?.hasMore,
             nextCursor: result?.nextCursor ?? result?.cursor ?? null,
         };
     }
@@ -2870,21 +2936,39 @@ export class ApiClient {
      */
     async listAdminDocuments(appId, userId) {
         return paginateAll(async (cursor) => {
-            const params = new URLSearchParams({
-                userId,
-                limit: String(ADMIN_INVENTORY_PAGE_SIZE),
+            const page = await this.listAdminDocumentsPage(appId, userId, {
+                limit: ADMIN_INVENTORY_PAGE_SIZE,
+                cursor,
             });
-            if (cursor)
-                params.set("cursor", cursor);
-            const result = await this.get(`/admin/api/apps/${appId}/documents?${params.toString()}`);
-            return {
-                items: result?.items ?? result?.documents ?? [],
-                // #1316: prefer `nextCursor`; the deprecated `cursor` alias keeps a
-                // shipped CLI paginating against a server that still dual-emits.
-                nextCursor: result?.nextCursor ?? result?.cursor,
-            };
+            return { items: page.items, nextCursor: page.nextCursor };
         });
     }
+    /**
+     * One page of the admin inventory of a user's documents (#3646).
+     *
+     * `documents list --user-id` prints exactly this — the page the caller's
+     * `--limit`/`--cursor` asked for, with the server's own page boundary
+     * beside it. `documents export-all`, which really does mean every document,
+     * keeps the walking `listAdminDocuments()` above.
+     *
+     * Tolerant of a pre-contract server, which answers with a bare
+     * `{ documents }` array and no cursor: that reads as a single page.
+     */
+    async listAdminDocumentsPage(appId, userId, options = {}) {
+        const params = new URLSearchParams({ userId });
+        if (options.limit !== undefined)
+            params.set("limit", String(options.limit));
+        if (options.cursor)
+            params.set("cursor", options.cursor);
+        const result = await this.get(`/admin/api/apps/${appId}/documents?${params.toString()}`);
+        return {
+            items: result?.items ?? result?.documents ?? [],
+            hasMore: result?.hasMore,
+            // #1316: prefer `nextCursor`; the deprecated `cursor` alias keeps a
+            // shipped CLI paginating against a server that still dual-emits.
+            nextCursor: result?.nextCursor ?? result?.cursor ?? null,
+        };
+    }
     /**
      * The document `AppUser.rootDocId` points at, or null when the user has none
      * yet (#3135). A user who is not a member of the app is a 404, which