@cdot65/prisma-airs-sdk 0.24.0 → 0.25.0

package/README.md

@@ -101,7 +101,7 @@ Experimental runtime methods also model image/audio/moderation/rerank/OCR, legac
 
 Secret-reference CRUD is verified using owned, unbound synthetic references; external secret resolution is not certified. See the [captured lifecycle output](docs-site/docs/guides/examples.mdx#secret-reference-management-lifecycle). Portkey compatibility remains partial; retired upstream endpoints and tenant-unverified families stay visible in the [complete operation ledger](docs-site/docs/developer/gateway-coverage.md).
 
-Request, cost, token and latency charts accept verified trace/metadata filters, status-code/API-key/provider-model lists and inclusive total-token/cost bounds. List members match with OR; distinct filters combine with AND. Cost bounds are in cents. Empty latency aggregates remain `null`, not measured zero. Unknown filters are rejected before authentication; the SCM query names differ from upstream Portkey. See the [typed telemetry contract](docs-site/docs/guides/ai-gateway-api.mdx#charts).
+Request, cost, token and latency charts, plus all six grouped analytics endpoints, accept verified trace/metadata filters, status-code/API-key/provider-model lists and inclusive total-token/cost bounds. List members match with OR; distinct filters combine with AND. Cost bounds are in cents. Groups preserve their existing columns and response envelopes; user grouping does not accept extra columns. Empty latency aggregates remain `null`, not measured zero. Unknown filters are rejected before authentication; the SCM query names differ from upstream Portkey. See the [typed telemetry contract](docs-site/docs/guides/ai-gateway-api.mdx#charts).
 
 All AI Gateway write bodies have exported Zod schemas and inferred TypeScript types. Validation
 happens before OAuth and network access; documented nonempty-update requirements are enforced. The package also

package/dist/index.cjs

@@ -1358,7 +1358,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 20;
 var MAX_CONNECTION_POOL_SIZE = 100;
 var MAX_NUMBER_OF_RETRIES = 5;
 var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
-var SDK_VERSION = "0.24.0";
+var SDK_VERSION = "0.25.0";
 var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
 var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -17935,24 +17935,27 @@ function toOffsetIso(d) {
   return `${String(d.getFullYear()).padStart(4, "0")}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}T${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}${sign}${pad(offsetMin / 60)}:${pad(offsetMin % 60)}`;
 }
 function serializeWindow(tsgId, opts, schema = telemetryWindowSchema) {
+  return serializeWindowWithOptions(tsgId, opts, schema).params;
+}
+function serializeWindowWithOptions(tsgId, opts, schema) {
   const result = schema.safeParse(opts);
   if (!result.success || typeof tsgId !== "string" || !/^\d+$/.test(tsgId)) invalidWindow();
   const end = result.data.end ?? /* @__PURE__ */ new Date();
   const start = result.data.start ?? new Date(end.getTime() - (result.data.days ?? 7) * 864e5);
   if (start.getTime() > end.getTime()) invalidWindow();
   return {
-    organisationId: tsgId,
-    workspaceSlug: result.data.workspaceSlug,
-    timeOfGenerationMin: toOffsetIso(start),
-    timeOfGenerationMax: toOffsetIso(end)
+    options: result.data,
+    params: {
+      organisationId: tsgId,
+      workspaceSlug: result.data.workspaceSlug,
+      timeOfGenerationMin: toOffsetIso(start),
+      timeOfGenerationMax: toOffsetIso(end)
+    }
   };
 }
 
 // src/ai-gateway/telemetry-client.ts
 var nonBlankString = import_zod54.z.string().min(1).refine((value2) => value2.trim().length > 0);
-var groupOptionsSchema = telemetryWindowSchema.extend({
-  columns: import_zod54.z.array(import_zod54.z.enum(AI_GW_GROUP_COLUMNS)).optional()
-}).strict();
 var logsOptionsSchema = telemetryWindowSchema.extend({
   pageSize: import_zod54.z.number().int().nonnegative().safe().optional(),
   traceId: nonBlankString.optional(),
@@ -17974,8 +17977,12 @@ function validChartBounds(opts) {
 }
 var AIGatewayChartFiltersSchema = import_zod54.z.object(chartFilterFields).strict().refine(validChartBounds);
 var filteredChartOptionsSchema = telemetryWindowSchema.extend(chartFilterFields).strict().refine(validChartBounds);
-function serializeChartOptions(tsgId, opts) {
-  const params = serializeWindow(tsgId, opts, filteredChartOptionsSchema);
+var groupOptionsSchema = telemetryWindowSchema.extend({
+  ...chartFilterFields,
+  columns: import_zod54.z.array(import_zod54.z.enum(AI_GW_GROUP_COLUMNS)).optional()
+}).strict().refine(validChartBounds);
+function serializeFilteredOptions(tsgId, input, schema = filteredChartOptionsSchema) {
+  const { params, options: opts } = serializeWindowWithOptions(tsgId, input, schema);
   if (opts.traceId !== void 0) params.traceId = opts.traceId;
   if (opts.metadata !== void 0) params.metadata = JSON.stringify(opts.metadata);
   if (opts.statusCodes !== void 0) params.statusCode = opts.statusCodes.join(",");
@@ -17984,6 +17991,7 @@ function serializeChartOptions(tsgId, opts) {
   for (const key of ["totalUnitsMin", "totalUnitsMax", "costMin", "costMax"]) {
     if (opts[key] !== void 0) params[key] = String(opts[key]);
   }
+  if (opts.columns?.length) params.columns = opts.columns.join(",");
   return params;
 }
 var AIGatewayTelemetryClient = class {
@@ -18027,7 +18035,7 @@ var AIGatewayTelemetryClient = class {
       "cost",
       opts,
       CostChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
@@ -18048,7 +18056,7 @@ var AIGatewayTelemetryClient = class {
       "requests",
       opts,
       CountChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
@@ -18070,7 +18078,7 @@ var AIGatewayTelemetryClient = class {
       "latency",
       opts,
       LatencyChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
@@ -18091,7 +18099,7 @@ var AIGatewayTelemetryClient = class {
       "tokens",
       opts,
       TokensChartResponseSchema,
-      serializeChartOptions(this.tsgId, opts)
+      serializeFilteredOptions(this.tsgId, opts)
     );
   }
   /**
@@ -18275,7 +18283,7 @@ var AIGatewayTelemetryClient = class {
   /**
    * Aggregate requests by a dimension.
    * @param dimension - One of {@link AI_GW_GROUP_DIMENSIONS}. Underscore names only.
-   * @param opts - Window plus optional extra columns.
+   * @param opts - Window, verified trace/metadata/list/range filters, and optional extra columns.
    * @returns One row per distinct dimension value.
    * @example
    * ```ts
@@ -18295,8 +18303,7 @@ var AIGatewayTelemetryClient = class {
         "Invalid telemetry grouping dimension",
         "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
       );
-    const params = serializeWindow(this.tsgId, opts, groupOptionsSchema);
-    if (opts.columns?.length) params.columns = opts.columns.join(",");
+    const params = serializeFilteredOptions(this.tsgId, opts, groupOptionsSchema);
     return request({
       method: "GET",
       baseUrl: this.baseUrl,
@@ -18309,7 +18316,7 @@ var AIGatewayTelemetryClient = class {
   }
   /**
    * Requests and cost per end user.
-   * @param opts - Workspace slug and time window.
+   * @param opts - Workspace slug, time window and verified trace/metadata/list/range filters.
    * @returns One record per user; `_user: ''` means calls with no end-user id. Costs in cents.
    * @example
    * ```ts
@@ -18325,7 +18332,7 @@ var AIGatewayTelemetryClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${AI_GW_GROUPS_PATH}/users`,
-      params: serializeWindow(this.tsgId, opts),
+      params: serializeFilteredOptions(this.tsgId, opts),
       responseSchema: UserGroupResponseSchema,
       auth: this.auth,
       numRetries: this.numRetries
@@ -18333,7 +18340,7 @@ var AIGatewayTelemetryClient = class {
   }
   /**
    * Requests grouped by HTTP status code.
-   * @param opts - Window plus optional extra columns.
+   * @param opts - Window, verified trace/metadata/list/range filters, and optional extra columns.
    * @returns One row per status. **446 = AIRS security block** (cost 0, never reached the LLM).
    * @example
    * ```ts
@@ -18348,8 +18355,7 @@ var AIGatewayTelemetryClient = class {
    * ```
    */
   async byStatusCode(opts) {
-    const params = serializeWindow(this.tsgId, opts, groupOptionsSchema);
-    if (opts.columns?.length) params.columns = opts.columns.join(",");
+    const params = serializeFilteredOptions(this.tsgId, opts, groupOptionsSchema);
     return request({
       method: "GET",
       baseUrl: this.baseUrl,
@@ -18384,10 +18390,14 @@ var AIGatewayTelemetryClient = class {
    * ```
    */
   async logs(opts) {
-    const params = serializeWindow(this.tsgId, opts, logsOptionsSchema);
-    if (opts.pageSize !== void 0) params.pageSize = String(opts.pageSize);
-    if (opts.traceId !== void 0) params.traceId = opts.traceId;
-    if (opts.statusCode !== void 0) params.statusCode = String(opts.statusCode);
+    const { params, options: validated } = serializeWindowWithOptions(
+      this.tsgId,
+      opts,
+      logsOptionsSchema
+    );
+    if (validated.pageSize !== void 0) params.pageSize = String(validated.pageSize);
+    if (validated.traceId !== void 0) params.traceId = validated.traceId;
+    if (validated.statusCode !== void 0) params.statusCode = String(validated.statusCode);
     return request({
       method: "GET",
       baseUrl: this.baseUrl,