@keystrokehq/segment 0.0.1

package/README.md

@@ -0,0 +1,232 @@
+# @keystrokehq/segment
+
+First-class Keystroke integration for
+[Twilio Segment](https://segment.com/) — the customer data platform.
+
+The package covers **160 operations across 24 domains** and **14 direct-binding
+triggers**, spanning Segment's three authentication boundaries:
+
+- **Tracking API** (`api.segment.io` / `events.eu1.segmentapis.com`) —
+  `identify`, `track`, `page`, `screen`, `group`, `alias`, `batch`, and a
+  backdated historical `import`.
+- **Public API** (`api.segmentapis.com` / `eu1.api.segmentapis.com`) — full
+  CRUD for sources, destinations, tracking plans, functions, warehouses,
+  Engage audiences & computed traits, monitoring, destination filters,
+  transformations, labels, IAM, reverse ETL, profiles sync, GDPR deletion &
+  suppression, delivery overview, and usage.
+- **Profile API** (`profiles.segment.com`) — read-only access to traits,
+  events, external ids, links, metadata, and audience membership.
+
+## Install
+
+The package is a workspace member; add a dependency from whichever workspace
+needs it:
+
+```json
+{
+  "dependencies": {
+    "@keystrokehq/segment": "workspace:*"
+  }
+}
+```
+
+## Credentials
+
+Segment does not publish an end-user OAuth flow for any of its three
+authentication surfaces. You configure tokens once in Segment and paste
+them into the Keystroke connection (`kind: 'manual'`):
+
+| Field                          | Required                      | What it unlocks |
+|--------------------------------|-------------------------------|-----------------|
+| `SEGMENT_PUBLIC_API_TOKEN`     | yes                           | Public API — every management action |
+| `SEGMENT_REGION`               | defaulted to `'us'`           | `'us'` \| `'eu'` — selects hosts for Public + Tracking APIs |
+| `SEGMENT_DEFAULT_WRITE_KEY`    | when calling `tracking.*` without a `sourceId` | Fallback write key |
+| `SEGMENT_WRITE_KEYS_JSON`      | when calling `tracking.*` with `sourceId`      | JSON map `{ [sourceId]: writeKey }` |
+| `SEGMENT_PROFILE_API_TOKEN`    | when calling `profiles.*`     | Profile API access token |
+| `SEGMENT_PROFILE_SPACE_ID`     | when calling `profiles.*` without per-call `spaceId` | Default Engage space |
+| `SEGMENT_WEBHOOK_SHARED_SECRET`| when using webhook triggers   | Shared secret configured on the Segment-side Webhook destination |
+
+```ts
+import { segment } from '@keystrokehq/segment/connection';
+```
+
+## Quickstart
+
+### Track an event
+
+```ts
+import { track } from '@keystrokehq/segment/tracking';
+
+await track.run(
+  { userId: 'u_123', event: 'Signup Completed', properties: { plan: 'pro' } },
+  { credentials: { segment: connectionCreds } }
+);
+```
+
+### List destinations
+
+```ts
+import { listDestinations } from '@keystrokehq/segment/destinations';
+
+const { items, nextPageToken } = await listDestinations.run(
+  { pageSize: 50 },
+  { credentials: { segment: connectionCreds } }
+);
+```
+
+### Create an audience in an Engage space
+
+```ts
+import { createAudience } from '@keystrokehq/segment/audiences';
+
+await createAudience.run(
+  {
+    spaceId: 'spa_abc',
+    name: 'VIP Users',
+    description: 'Users with >$1000 LTV',
+    definition: { type: 'USERS', query: 'lifetime_value > 1000' },
+  },
+  { credentials: { segment: connectionCreds } }
+);
+```
+
+### React to audience membership changes (webhook trigger)
+
+Set up a Webhook destination in Segment pointing at your Keystroke ingress
+for this integration, with a shared secret matching
+`SEGMENT_WEBHOOK_SHARED_SECRET`:
+
+```ts
+import { webhooks } from '@keystrokehq/segment/triggers';
+
+export const onVipEntered = webhooks.audienceEntered({
+  name: 'VIP entered',
+  filter: (event) => event.audienceKey === 'vip_users',
+  transform: (event) => ({ userId: event.userId, enteredAt: event.timestamp }),
+});
+```
+
+### Poll a reverse-ETL run to completion
+
+```ts
+import { polling } from '@keystrokehq/segment/triggers';
+
+export const onModelRun = polling.reverseEtlRunSucceeded(
+  { modelId: 'rem_user_segments' },
+  { schedule: '5m', transform: (run) => ({ runId: run.runId, status: run.status }) }
+);
+```
+
+### Read a profile's traits (Profile API)
+
+```ts
+import { getProfileTraits } from '@keystrokehq/segment/profiles';
+
+await getProfileTraits.run(
+  { profileId: 'u_123', spaceId: 'spa_abc' },
+  { credentials: { segment: connectionCreds } }
+);
+```
+
+## Public surface
+
+### End-user authoring subpaths
+
+Operation modules (import the individual operations you need):
+
+- `@keystrokehq/segment/tracking`
+- `@keystrokehq/segment/sources`
+- `@keystrokehq/segment/destinations`
+- `@keystrokehq/segment/tracking-plans`
+- `@keystrokehq/segment/functions`
+- `@keystrokehq/segment/warehouses`
+- `@keystrokehq/segment/audiences`
+- `@keystrokehq/segment/computed-traits`
+- `@keystrokehq/segment/monitoring`
+- `@keystrokehq/segment/destination-filters`
+- `@keystrokehq/segment/transformations`
+- `@keystrokehq/segment/labels`
+- `@keystrokehq/segment/iam-groups`
+- `@keystrokehq/segment/iam-users`
+- `@keystrokehq/segment/roles`
+- `@keystrokehq/segment/events-catalog`
+- `@keystrokehq/segment/edge-functions`
+- `@keystrokehq/segment/reverse-etl`
+- `@keystrokehq/segment/profiles-sync`
+- `@keystrokehq/segment/deletion-suppression`
+- `@keystrokehq/segment/delivery-overview`
+- `@keystrokehq/segment/usage`
+- `@keystrokehq/segment/workspaces`
+- `@keystrokehq/segment/profiles`
+
+Triggers (all direct-binding — no preset APIs):
+
+- `@keystrokehq/segment/triggers` exports `webhooks` and `polling`
+  namespaces plus each polling helper by name.
+
+### Support surfaces
+
+- `@keystrokehq/segment/connection` — `segment`, `SegmentCredentials`
+- `@keystrokehq/segment/client` — `createSegmentClient`, three
+  sub-clients, `splitBatch`, host constants
+- `@keystrokehq/segment/schemas` — reusable Zod primitives
+- `@keystrokehq/segment/events` — curated trigger-event schemas
+- `@keystrokehq/segment/verification` —
+  `verifySegmentWebhookRequest`, `buildSegmentWebhookSignature`
+
+### Internal surfaces — not for authoring
+
+- `@keystrokehq/segment/_official` — bundle wiring for
+  `@keystrokehq/official-integration-catalog`
+- `@keystrokehq/segment/_runtime` — runtime registry hooks
+
+## Caveats
+
+- **Regional dispatch.** `SEGMENT_REGION = 'eu'` routes Tracking calls to
+  `events.eu1.segmentapis.com` **and** Public API calls to
+  `eu1.api.segmentapis.com`. This was a PLAN delta — the earlier spec said
+  the Public API was region-agnostic. See `IMPLEMENTATION_NOTES.md` Q1.
+- **Write-key fan-out.** Tracking operations accept an optional `sourceId`.
+  When present, the client looks it up in `SEGMENT_WRITE_KEYS_JSON`;
+  otherwise it falls back to `SEGMENT_DEFAULT_WRITE_KEY`. If neither
+  resolves, the call fails with `SegmentApiError { kind: 'missing_credential' }`.
+- **Batch limits.** Segment enforces 500 KB per batch and 32 KB per event.
+  `tracking.batch` automatically splits oversized batches and reports any
+  individual events that exceed 32 KB in the `rejected` output.
+- **Alias deprecation.** Many downstream destinations ignore Segment alias
+  calls; `segment.tracking.alias` is primarily useful for warehouse
+  identity resolution.
+- **`segment.tracking.import` is sugar.** Segment does not publish a
+  `/v1/import` endpoint in its current HTTP API docs. The action sends a
+  `POST /v1/track` with the caller's `timestamp` and a fresh `sentAt`, which
+  is the documented pattern for historical imports. Only destinations that
+  accept backdated events (warehouses, Mixpanel, Amplitude) will backfill.
+- **Audience webhook provisioning is manual.** You must configure the
+  Webhook destination inside Segment's UI, point it at your Keystroke
+  ingress URL, and set `SEGMENT_WEBHOOK_SHARED_SECRET` on **both** sides.
+  The package verifies the `X-Signature` header (HMAC-SHA1 hex) via
+  `src/verification.ts`.
+- **Polling trigger cost.** The polling triggers issue one Public API
+  request per tick per binding. Space out schedules on high-volume
+  workspaces and collapse to the minimum number of bindings per surface
+  you can.
+- **No official SDK.** `@segment/public-api-sdk-typescript` exists but
+  depends on `request@^2` and `bluebird@^3` — not ESM-friendly or usable
+  in Cloudflare Workers / V8 isolates. The client is hand-rolled
+  `fetch`-based.
+
+## Documentation & references
+
+- Tracking API: https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/
+- Public API: https://docs.segmentapis.com/
+- Profile API: https://segment.com/docs/unify/profile-api/
+- Engage audiences & computed traits: https://segment.com/docs/engage/
+- Functions: https://segment.com/docs/connections/functions/
+- Reverse ETL: https://segment.com/docs/connections/reverse-etl/
+- Monitoring & Alerts: https://segment.com/docs/monitor/
+- Regional endpoints: https://segment.com/docs/guides/regional-segment/
+- Deletion & suppression: https://segment.com/docs/privacy/user-deletion-and-suppression/
+
+## License
+
+MIT

package/dist/_official/index.d.mts

@@ -0,0 +1,2 @@
+import { a as segmentOfficialIntegration, i as segmentBundle } from "../integration-D2yRaKFR.mjs";
+export { segmentBundle, segmentOfficialIntegration };

package/dist/_official/index.mjs

@@ -0,0 +1,3 @@
+import { n as segmentBundle, r as segmentOfficialIntegration } from "../integration-B5zYasBZ.mjs";
+
+export { segmentBundle, segmentOfficialIntegration };

package/dist/_runtime/index.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/_runtime/index.mjs

@@ -0,0 +1 @@
+export {  };

package/dist/audiences.d.mts

@@ -0,0 +1,282 @@
+import { z } from "zod";
+import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
+import * as _keystrokehq_core0 from "@keystrokehq/core";
+
+//#region src/audiences.d.ts
+declare const audienceSchema: z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodOptional<z.ZodString>;
+  name: z.ZodOptional<z.ZodString>;
+  description: z.ZodOptional<z.ZodString>;
+  definition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare const listAudiences: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  pageSize: z.ZodOptional<z.ZodNumber>;
+  pageToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  items: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    key: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    definition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  nextPageToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const getAudience: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodOptional<z.ZodString>;
+  name: z.ZodOptional<z.ZodString>;
+  description: z.ZodOptional<z.ZodString>;
+  definition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$catchall<z.ZodUnknown>>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const createAudience: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  name: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  definition: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodOptional<z.ZodString>;
+  name: z.ZodOptional<z.ZodString>;
+  description: z.ZodOptional<z.ZodString>;
+  definition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$catchall<z.ZodUnknown>>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const updateAudience: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  description: z.ZodOptional<z.ZodString>;
+  definition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  key: z.ZodOptional<z.ZodString>;
+  name: z.ZodOptional<z.ZodString>;
+  description: z.ZodOptional<z.ZodString>;
+  definition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$catchall<z.ZodUnknown>>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const deleteAudience: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  deleted: z.ZodLiteral<true>;
+}, z.core.$strip>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const previewAudience: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  definition: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>, z.ZodObject<{
+  count: z.ZodOptional<z.ZodNumber>;
+  sample: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+}, z.core.$catchall<z.ZodUnknown>>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const getAudienceMembership: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  id: z.ZodString;
+  profileId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  profileId: z.ZodOptional<z.ZodString>;
+  isMember: z.ZodOptional<z.ZodBoolean>;
+  enteredAt: z.ZodOptional<z.ZodString>;
+  exitedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$catchall<z.ZodUnknown>>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const listAudienceMembers: _keystrokehq_core0.Operation<z.ZodObject<{
+  spaceId: z.ZodString;
+  id: z.ZodString;
+  pageSize: z.ZodOptional<z.ZodNumber>;
+  pageToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  items: z.ZodArray<z.ZodObject<{
+    profileId: z.ZodString;
+    traits: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    enteredAt: z.ZodOptional<z.ZodString>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  nextPageToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly [_keystrokehq_core0.CredentialSet<"segment", z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SEGMENT_PUBLIC_API_TOKEN: z.ZodString;
+  SEGMENT_REGION: z.ZodDefault<z.ZodEnum<{
+    us: "us";
+    eu: "eu";
+  }>>;
+  SEGMENT_DEFAULT_WRITE_KEY: z.ZodOptional<z.ZodString>;
+  SEGMENT_WRITE_KEYS_JSON: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_API_TOKEN: z.ZodOptional<z.ZodString>;
+  SEGMENT_PROFILE_SPACE_ID: z.ZodOptional<z.ZodString>;
+  SEGMENT_WEBHOOK_SHARED_SECRET: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+//#endregion
+export { audienceSchema, createAudience, deleteAudience, getAudience, getAudienceMembership, listAudienceMembers, listAudiences, previewAudience, updateAudience };