@cdot65/prisma-airs-sdk 0.23.0 → 0.25.0

package/README.md

@@ -101,6 +101,8 @@ Experimental runtime methods also model image/audio/moderation/rerank/OCR, legac
 
 Secret-reference CRUD is verified using owned, unbound synthetic references; external secret resolution is not certified. See the [captured lifecycle output](docs-site/docs/guides/examples.mdx#secret-reference-management-lifecycle). Portkey compatibility remains partial; retired upstream endpoints and tenant-unverified families stay visible in the [complete operation ledger](docs-site/docs/developer/gateway-coverage.md).
 
+Request, cost, token and latency charts, plus all six grouped analytics endpoints, accept verified trace/metadata filters, status-code/API-key/provider-model lists and inclusive total-token/cost bounds. List members match with OR; distinct filters combine with AND. Cost bounds are in cents. Groups preserve their existing columns and response envelopes; user grouping does not accept extra columns. Empty latency aggregates remain `null`, not measured zero. Unknown filters are rejected before authentication; the SCM query names differ from upstream Portkey. See the [typed telemetry contract](docs-site/docs/guides/ai-gateway-api.mdx#charts).
+
 All AI Gateway write bodies have exported Zod schemas and inferred TypeScript types. Validation
 happens before OAuth and network access; documented nonempty-update requirements are enforced. The package also
 exports typed routing/provider configuration, deterministic known-value catalogs,

package/dist/index.cjs

@@ -22,6 +22,7 @@ var index_exports = {};
 __export(index_exports, {
   AIGatewayApiKeysClient: () => AIGatewayApiKeysClient,
   AIGatewayAuditLogsClient: () => AIGatewayAuditLogsClient,
+  AIGatewayChartFiltersSchema: () => AIGatewayChartFiltersSchema,
   AIGatewayClient: () => AIGatewayClient,
   AIGatewayConfigsClient: () => AIGatewayConfigsClient,
   AIGatewayDeploymentsClient: () => AIGatewayDeploymentsClient,
@@ -1357,7 +1358,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 20;
 var MAX_CONNECTION_POOL_SIZE = 100;
 var MAX_NUMBER_OF_RETRIES = 5;
 var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
-var SDK_VERSION = "0.23.0";
+var SDK_VERSION = "0.25.0";
 var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
 var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -17934,37 +17935,63 @@ function toOffsetIso(d) {
   return `${String(d.getFullYear()).padStart(4, "0")}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}T${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}${sign}${pad(offsetMin / 60)}:${pad(offsetMin % 60)}`;
 }
 function serializeWindow(tsgId, opts, schema = telemetryWindowSchema) {
+  return serializeWindowWithOptions(tsgId, opts, schema).params;
+}
+function serializeWindowWithOptions(tsgId, opts, schema) {
   const result = schema.safeParse(opts);
   if (!result.success || typeof tsgId !== "string" || !/^\d+$/.test(tsgId)) invalidWindow();
   const end = result.data.end ?? /* @__PURE__ */ new Date();
   const start = result.data.start ?? new Date(end.getTime() - (result.data.days ?? 7) * 864e5);
   if (start.getTime() > end.getTime()) invalidWindow();
   return {
-    organisationId: tsgId,
-    workspaceSlug: result.data.workspaceSlug,
-    timeOfGenerationMin: toOffsetIso(start),
-    timeOfGenerationMax: toOffsetIso(end)
+    options: result.data,
+    params: {
+      organisationId: tsgId,
+      workspaceSlug: result.data.workspaceSlug,
+      timeOfGenerationMin: toOffsetIso(start),
+      timeOfGenerationMax: toOffsetIso(end)
+    }
   };
 }
 
 // src/ai-gateway/telemetry-client.ts
 var nonBlankString = import_zod54.z.string().min(1).refine((value2) => value2.trim().length > 0);
-var groupOptionsSchema = telemetryWindowSchema.extend({
-  columns: import_zod54.z.array(import_zod54.z.enum(AI_GW_GROUP_COLUMNS)).optional()
-}).strict();
 var logsOptionsSchema = telemetryWindowSchema.extend({
   pageSize: import_zod54.z.number().int().nonnegative().safe().optional(),
   traceId: nonBlankString.optional(),
   statusCode: import_zod54.z.number().int().nonnegative().safe().optional()
 }).strict();
-var filteredChartOptionsSchema = telemetryWindowSchema.extend({
+var chartFilterFields = {
   traceId: nonBlankString.optional(),
-  metadata: GatewayJsonObjectSchema.pipe(import_zod54.z.record(import_zod54.z.string())).optional()
-}).strict();
-function serializeChartOptions(tsgId, opts) {
-  const params = serializeWindow(tsgId, opts, filteredChartOptionsSchema);
+  metadata: GatewayJsonObjectSchema.pipe(import_zod54.z.record(import_zod54.z.string())).optional(),
+  statusCodes: import_zod54.z.array(import_zod54.z.number().int().nonnegative().safe()).nonempty().optional(),
+  apiKeyIds: import_zod54.z.array(import_zod54.z.string().uuid()).nonempty().optional(),
+  aiOrgModels: import_zod54.z.array(import_zod54.z.string().regex(/^[^,\s]+__[^,\s]+$/)).nonempty().optional(),
+  totalUnitsMin: import_zod54.z.number().int().nonnegative().safe().optional(),
+  totalUnitsMax: import_zod54.z.number().int().nonnegative().safe().optional(),
+  costMin: import_zod54.z.number().finite().nonnegative().optional(),
+  costMax: import_zod54.z.number().finite().nonnegative().optional()
+};
+function validChartBounds(opts) {
+  return (opts.totalUnitsMin === void 0 || opts.totalUnitsMax === void 0 || opts.totalUnitsMin <= opts.totalUnitsMax) && (opts.costMin === void 0 || opts.costMax === void 0 || opts.costMin <= opts.costMax);
+}
+var AIGatewayChartFiltersSchema = import_zod54.z.object(chartFilterFields).strict().refine(validChartBounds);
+var filteredChartOptionsSchema = telemetryWindowSchema.extend(chartFilterFields).strict().refine(validChartBounds);
+var groupOptionsSchema = telemetryWindowSchema.extend({
+  ...chartFilterFields,
+  columns: import_zod54.z.array(import_zod54.z.enum(AI_GW_GROUP_COLUMNS)).optional()
+}).strict().refine(validChartBounds);
+function serializeFilteredOptions(tsgId, input, schema = filteredChartOptionsSchema) {
+  const { params, options: opts } = serializeWindowWithOptions(tsgId, input, schema);
   if (opts.traceId !== void 0) params.traceId = opts.traceId;
   if (opts.metadata !== void 0) params.metadata = JSON.stringify(opts.metadata);
+  if (opts.statusCodes !== void 0) params.statusCode = opts.statusCodes.join(",");
+  if (opts.apiKeyIds !== void 0) params.apiKeyIds = opts.apiKeyIds.join(",");
+  if (opts.aiOrgModels !== void 0) params.aiOrgModel = opts.aiOrgModels.join(",");
+  for (const key of ["totalUnitsMin", "totalUnitsMax", "costMin", "costMax"]) {
+    if (opts[key] !== void 0) params[key] = String(opts[key]);
+  }
+  if (opts.columns?.length) params.columns = opts.columns.join(",");
   return params;
 }
 var AIGatewayTelemetryClient = class {
@@ -17992,7 +18019,7 @@ var AIGatewayTelemetryClient = class {
   }
   /**
    * Total and per-day spend. **Values are in cents.**
-   * @param opts - Workspace slug, time window and optional verified trace/metadata filters.
+   * @param opts - Workspace slug, time window and verified trace, metadata, list and range filters.
    * @returns Cost series plus the period total, in cents.
    * @example
    * ```ts
@@ -18008,12 +18035,12 @@ var AIGatewayTelemetryClient = class {
       "cost",
       opts,
       CostChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
    * Per-day request counts.
-   * @param opts - Workspace slug, time window and optional verified trace/metadata filters.
+   * @param opts - Workspace slug, time window and verified trace, metadata, list and range filters.
    * @returns Request-count series plus the filtered period total.
    * @example
    * ```ts
@@ -18029,12 +18056,12 @@ var AIGatewayTelemetryClient = class {
       "requests",
       opts,
       CountChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
    * Latency in milliseconds. Percentiles are returned per-bucket and for the period.
-   * @param opts - Workspace slug, time window and optional verified trace/metadata filters.
+   * @param opts - Workspace slug, time window and verified trace, metadata, list and range filters.
    * @returns Latency series with p50/p90/p99; `data.total` is the period mean, not a sum.
    * The period mean and percentiles are null when the cohort has no matching requests.
    * @example
@@ -18051,12 +18078,12 @@ var AIGatewayTelemetryClient = class {
       "latency",
       opts,
       LatencyChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
    * Token usage, split into request and response units.
-   * @param opts - Workspace slug, time window and optional verified trace/metadata filters.
+   * @param opts - Workspace slug, time window and verified trace, metadata, list and range filters.
    * @returns Token series plus request/response unit totals.
    * @example
    * ```ts
@@ -18072,7 +18099,7 @@ var AIGatewayTelemetryClient = class {
       "tokens",
       opts,
       TokensChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
@@ -18256,7 +18283,7 @@ var AIGatewayTelemetryClient = class {
   /**
    * Aggregate requests by a dimension.
    * @param dimension - One of {@link AI_GW_GROUP_DIMENSIONS}. Underscore names only.
-   * @param opts - Window plus optional extra columns.
+   * @param opts - Window, verified trace/metadata/list/range filters, and optional extra columns.
    * @returns One row per distinct dimension value.
    * @example
    * ```ts
@@ -18276,8 +18303,7 @@ var AIGatewayTelemetryClient = class {
         "Invalid telemetry grouping dimension",
         "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
       );
-    const params = serializeWindow(this.tsgId, opts, groupOptionsSchema);
-    if (opts.columns?.length) params.columns = opts.columns.join(",");
+    const params = serializeFilteredOptions(this.tsgId, opts, groupOptionsSchema);
     return request({
       method: "GET",
       baseUrl: this.baseUrl,
@@ -18290,7 +18316,7 @@ var AIGatewayTelemetryClient = class {
   }
   /**
    * Requests and cost per end user.
-   * @param opts - Workspace slug and time window.
+   * @param opts - Workspace slug, time window and verified trace/metadata/list/range filters.
    * @returns One record per user; `_user: ''` means calls with no end-user id. Costs in cents.
    * @example
    * ```ts
@@ -18306,7 +18332,7 @@ var AIGatewayTelemetryClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${AI_GW_GROUPS_PATH}/users`,
-      params: serializeWindow(this.tsgId, opts),
+      params: serializeFilteredOptions(this.tsgId, opts),
       responseSchema: UserGroupResponseSchema,
       auth: this.auth,
       numRetries: this.numRetries
@@ -18314,7 +18340,7 @@ var AIGatewayTelemetryClient = class {
   }
   /**
    * Requests grouped by HTTP status code.
-   * @param opts - Window plus optional extra columns.
+   * @param opts - Window, verified trace/metadata/list/range filters, and optional extra columns.
    * @returns One row per status. **446 = AIRS security block** (cost 0, never reached the LLM).
    * @example
    * ```ts
@@ -18329,8 +18355,7 @@ var AIGatewayTelemetryClient = class {
    * ```
    */
   async byStatusCode(opts) {
-    const params = serializeWindow(this.tsgId, opts, groupOptionsSchema);
-    if (opts.columns?.length) params.columns = opts.columns.join(",");
+    const params = serializeFilteredOptions(this.tsgId, opts, groupOptionsSchema);
     return request({
       method: "GET",
       baseUrl: this.baseUrl,
@@ -18365,10 +18390,14 @@ var AIGatewayTelemetryClient = class {
    * ```
    */
   async logs(opts) {
-    const params = serializeWindow(this.tsgId, opts, logsOptionsSchema);
-    if (opts.pageSize !== void 0) params.pageSize = String(opts.pageSize);
-    if (opts.traceId !== void 0) params.traceId = opts.traceId;
-    if (opts.statusCode !== void 0) params.statusCode = String(opts.statusCode);
+    const { params, options: validated } = serializeWindowWithOptions(
+      this.tsgId,
+      opts,
+      logsOptionsSchema
+    );
+    if (validated.pageSize !== void 0) params.pageSize = String(validated.pageSize);
+    if (validated.traceId !== void 0) params.traceId = validated.traceId;
+    if (validated.statusCode !== void 0) params.statusCode = String(validated.statusCode);
     return request({
       method: "GET",
       baseUrl: this.baseUrl,
@@ -22627,6 +22656,7 @@ function setDottedValue(input, path, value2) {
 0 && (module.exports = {
   AIGatewayApiKeysClient,
   AIGatewayAuditLogsClient,
+  AIGatewayChartFiltersSchema,
   AIGatewayClient,
   AIGatewayConfigsClient,
   AIGatewayDeploymentsClient,