From 9deb4601304f70b57d3bf7c769e03167662d66ef Mon Sep 17 00:00:00 2001
From: Virgil <virgil@lethean.io>
Date: Thu, 2 Apr 2026 01:29:41 +0000
Subject: [PATCH] feat(admin): add quota group endpoints

Co-Authored-By: Virgil <virgil@lethean.io>
---
 admin.go      | 14 ++++++++
 admin_test.go | 92 +++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 106 insertions(+)

diff --git a/admin.go b/admin.go
index 62b25ae..6e40914 100644
--- a/admin.go
+++ b/admin.go
@@ -80,6 +80,20 @@ func (s *AdminService) IterEmails(ctx context.Context) iter.Seq2[types.Email, er
 	return ListIter[types.Email](ctx, s.client, "/api/v1/admin/emails", nil)
 }
 
+// ListQuotaGroups returns all available quota groups.
+func (s *AdminService) ListQuotaGroups(ctx context.Context) ([]types.QuotaGroup, error) {
+	return ListAll[types.QuotaGroup](ctx, s.client, "/api/v1/admin/quota/groups", nil)
+}
+
+// CreateQuotaGroup creates a new quota group.
+func (s *AdminService) CreateQuotaGroup(ctx context.Context, opts *types.CreateQuotaGroupOptions) (*types.QuotaGroup, error) {
+	var out types.QuotaGroup
+	if err := s.client.Post(ctx, "/api/v1/admin/quota/groups", opts, &out); err != nil {
+		return nil, err
+	}
+	return &out, nil
+}
+
 // SearchEmails searches all email addresses by keyword (admin only).
 func (s *AdminService) SearchEmails(ctx context.Context, q string) ([]types.Email, error) {
 	return ListAll[types.Email](ctx, s.client, "/api/v1/admin/emails/search", map[string]string{"q": q})
diff --git a/admin_test.go b/admin_test.go
index b6e3dc0..3ce6ec0 100644
--- a/admin_test.go
+++ b/admin_test.go
@@ -224,6 +224,98 @@ func TestAdminService_ListEmails_Good(t *testing.T) {
 	}
 }
 
+func TestAdminService_ListQuotaGroups_Good(t *testing.T) {
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodGet {
+			t.Errorf("expected GET, got %s", r.Method)
+		}
+		if r.URL.Path != "/api/v1/admin/quota/groups" {
+			t.Errorf("wrong path: %s", r.URL.Path)
+		}
+		json.NewEncoder(w).Encode([]types.QuotaGroup{
+			{
+				Name: "default",
+				Rules: []*types.QuotaRuleInfo{
+					{Name: "git", Limit: 200000000, Subjects: []string{"size:repos:all"}},
+				},
+			},
+			{
+				Name: "premium",
+			},
+		})
+	}))
+	defer srv.Close()
+
+	f := NewForge(srv.URL, "tok")
+	groups, err := f.Admin.ListQuotaGroups(context.Background())
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(groups) != 2 {
+		t.Fatalf("got %d groups, want 2", len(groups))
+	}
+	if groups[0].Name != "default" {
+		t.Errorf("got name=%q, want %q", groups[0].Name, "default")
+	}
+	if len(groups[0].Rules) != 1 || groups[0].Rules[0].Name != "git" {
+		t.Errorf("unexpected rules: %+v", groups[0].Rules)
+	}
+}
+
+func TestAdminService_CreateQuotaGroup_Good(t *testing.T) {
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			t.Errorf("expected POST, got %s", r.Method)
+		}
+		if r.URL.Path != "/api/v1/admin/quota/groups" {
+			t.Errorf("wrong path: %s", r.URL.Path)
+		}
+		var opts types.CreateQuotaGroupOptions
+		if err := json.NewDecoder(r.Body).Decode(&opts); err != nil {
+			t.Fatal(err)
+		}
+		if opts.Name != "newgroup" {
+			t.Errorf("got name=%q, want %q", opts.Name, "newgroup")
+		}
+		if len(opts.Rules) != 1 || opts.Rules[0].Name != "git" {
+			t.Fatalf("unexpected rules: %+v", opts.Rules)
+		}
+		w.WriteHeader(http.StatusCreated)
+		json.NewEncoder(w).Encode(types.QuotaGroup{
+			Name: opts.Name,
+			Rules: []*types.QuotaRuleInfo{
+				{
+					Name:     opts.Rules[0].Name,
+					Limit:    opts.Rules[0].Limit,
+					Subjects: opts.Rules[0].Subjects,
+				},
+			},
+		})
+	}))
+	defer srv.Close()
+
+	f := NewForge(srv.URL, "tok")
+	group, err := f.Admin.CreateQuotaGroup(context.Background(), &types.CreateQuotaGroupOptions{
+		Name: "newgroup",
+		Rules: []*types.CreateQuotaRuleOptions{
+			{
+				Name:     "git",
+				Limit:    200000000,
+				Subjects: []string{"size:repos:all"},
+			},
+		},
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if group.Name != "newgroup" {
+		t.Errorf("got name=%q, want %q", group.Name, "newgroup")
+	}
+	if len(group.Rules) != 1 || group.Rules[0].Limit != 200000000 {
+		t.Errorf("unexpected rules: %+v", group.Rules)
+	}
+}
+
 func TestAdminService_SearchEmails_Good(t *testing.T) {
 	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		if r.Method != http.MethodGet {