* s3vectors: run an operation for trusted local tooling
Like s3tables.Manager.Execute, Server.Execute runs one S3 Vectors operation
through its handler as a given identity, without a signed request. The admin
console can then manage vector buckets through the same validation,
authorization and catalog steps as the API.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK
* admin: list, inspect, create and delete vector buckets over the API
/api/s3vectors runs the S3 Vectors operations through Server.Execute as the
admin account: list vector buckets with their encryption, read one bucket
with its policy and each index's data type, dimension, distance metric and
non-filterable keys, create and delete a bucket, and delete an index. Going
through the operations keeps the API's rules, such as ICEBERG buckets not
being vector buckets and the implicit index namespace not blocking a delete.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK
* s3vectors: export the rule for which table buckets are vector buckets
IsVectorBucketFormat names the check ListVectorBuckets and isVectorBucket
already make, so the admin console can tell the same buckets apart.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK
* admin: vector bucket pages
Object Store > Vector Buckets lists the vector buckets with their ARN,
encryption and creation time, creates and deletes them, and opens one bucket
with its indexes (data type, dimension, distance metric, non-filterable keys)
and its policy, where an index can be deleted. A LANCE row on the Table
Buckets page links to the same bucket's vector page, since both APIs serve it.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK
* admin: stop the vector bucket and index lists at the list limit
A page cut short by filtered ICEBERG buckets let the next page carry
the list past s3TablesAdminListLimit.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* admin: say when a vector bucket or index list is cut at the limit
The lists stop at s3TablesAdminListLimit while more remain, so mark
them truncated and point to an S3 Vectors client for the rest.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* admin: indent the vector bucket policy
A policy stored as one line ran off the right edge of the details page.
Policies that are not valid JSON are shown as stored.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* admin: show a deeply nested vector bucket policy as stored
Indenting multiplies the size of a deeply nested document, so a policy
past 32 levels of nesting is shown without indenting.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
