@openrouter/sdk 1.2.50 → 1.2.52

package/esm/funcs/byokCreate.d.ts

@@ -13,7 +13,7 @@ import { Result } from "../types/fp.js";
  * Create a BYOK provider credential
  *
  * @remarks
- * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys. [Management key](/docs/guides/overview/auth/management-api-keys) required.
  */
 export declare function byokCreate(client: OpenRouterCore, request: operations.CreateBYOKKeyRequest, options?: RequestOptions): APIPromise<Result<models.CreateBYOKKeyResponse, errors.BadRequestResponseError | errors.UnauthorizedResponseError | errors.ForbiddenResponseError | errors.InternalServerResponseError | OpenRouterError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=byokCreate.d.ts.map

package/esm/funcs/byokCreate.js

@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
  * Create a BYOK provider credential
  *
  * @remarks
- * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys. [Management key](/docs/guides/overview/auth/management-api-keys) required.
  */
 export function byokCreate(client, request, options) {
     return new APIPromise($do(client, request, options));

package/esm/funcs/byokUpdate.d.ts

@@ -13,7 +13,7 @@ import { Result } from "../types/fp.js";
  * Update a BYOK provider credential
  *
  * @remarks
- * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys (`null` clears the restriction). [Management key](/docs/guides/overview/auth/management-api-keys) required.
  */
 export declare function byokUpdate(client: OpenRouterCore, request: operations.UpdateBYOKKeyRequest, options?: RequestOptions): APIPromise<Result<models.UpdateBYOKKeyResponse, errors.BadRequestResponseError | errors.UnauthorizedResponseError | errors.NotFoundResponseError | errors.InternalServerResponseError | OpenRouterError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=byokUpdate.d.ts.map

package/esm/funcs/byokUpdate.js

@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
  * Update a BYOK provider credential
  *
  * @remarks
- * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys (`null` clears the restriction). [Management key](/docs/guides/overview/auth/management-api-keys) required.
  */
 export function byokUpdate(client, request, options) {
     return new APIPromise($do(client, request, options));

package/esm/lib/config.d.ts

@@ -50,8 +50,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1.0.0";
-    readonly sdkVersion: "1.2.50";
+    readonly sdkVersion: "1.2.52";
     readonly genVersion: "2.914.0";
-    readonly userAgent: "speakeasy-sdk/typescript 1.2.50 2.914.0 1.0.0 @openrouter/sdk";
+    readonly userAgent: "speakeasy-sdk/typescript 1.2.52 2.914.0 1.0.0 @openrouter/sdk";
 };
 //# sourceMappingURL=config.d.ts.map

package/esm/lib/config.js

@@ -29,8 +29,8 @@ export function serverURLFromOptions(options) {
 export const SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.0.0",
-    sdkVersion: "1.2.50",
+    sdkVersion: "1.2.52",
     genVersion: "2.914.0",
-    userAgent: "speakeasy-sdk/typescript 1.2.50 2.914.0 1.0.0 @openrouter/sdk",
+    userAgent: "speakeasy-sdk/typescript 1.2.52 2.914.0 1.0.0 @openrouter/sdk",
 };
 //# sourceMappingURL=config.js.map

package/esm/models/byokproviderslug.d.ts

@@ -55,6 +55,7 @@ export declare const BYOKProviderSlug: {
     readonly Ionstream: "ionstream";
     readonly Krea: "krea";
     readonly Liquid: "liquid";
+    readonly Makora: "makora";
     readonly Mancer: "mancer";
     readonly Mara: "mara";
     readonly Meta: "meta";

package/esm/models/byokproviderslug.js

@@ -58,6 +58,7 @@ export const BYOKProviderSlug = {
     Ionstream: "ionstream",
     Krea: "krea",
     Liquid: "liquid",
+    Makora: "makora",
     Mancer: "mancer",
     Mara: "mara",
     Meta: "meta",

package/esm/models/createbyokkeyrequest.d.ts

@@ -1,6 +1,10 @@
 import * as z from "zod/v4";
 import { BYOKProviderSlug } from "./byokproviderslug.js";
 export type CreateBYOKKeyRequest = {
+    /**
+     * Optional allowlist of OpenRouter API key hashes (`api_keys.hash`) that may use this credential. `null` means no restriction. Must contain at least one hash if provided. Hashes that do not belong to your account return a 400.
+     */
+    allowedApiKeyHashes?: Array<string> | null | undefined;
     /**
      * Optional allowlist of model slugs this credential may be used for. `null` means no restriction.
      */
@@ -36,6 +40,7 @@ export type CreateBYOKKeyRequest = {
 };
 /** @internal */
 export type CreateBYOKKeyRequest$Outbound = {
+    allowed_api_key_hashes?: Array<string> | null | undefined;
     allowed_models?: Array<string> | null | undefined;
     allowed_user_ids?: Array<string> | null | undefined;
     disabled?: boolean | undefined;

package/esm/models/createbyokkeyrequest.js

@@ -7,6 +7,7 @@ import { remap as remap$ } from "../lib/primitives.js";
 import { BYOKProviderSlug$outboundSchema, } from "./byokproviderslug.js";
 /** @internal */
 export const CreateBYOKKeyRequest$outboundSchema = z.object({
+    allowedApiKeyHashes: z.nullable(z.array(z.string())).optional(),
     allowedModels: z.nullable(z.array(z.string())).optional(),
     allowedUserIds: z.nullable(z.array(z.string())).optional(),
     disabled: z.boolean().optional(),
@@ -17,6 +18,7 @@ export const CreateBYOKKeyRequest$outboundSchema = z.object({
     workspaceId: z.string().optional(),
 }).transform((v) => {
     return remap$(v, {
+        allowedApiKeyHashes: "allowed_api_key_hashes",
         allowedModels: "allowed_models",
         allowedUserIds: "allowed_user_ids",
         isFallback: "is_fallback",

package/esm/models/imagegenerationproviderpreferences.d.ts

@@ -224,6 +224,9 @@ export type ImageGenerationProviderPreferencesOptions = {
     lynnPrivate?: {
         [k: string]: any;
     } | undefined;
+    makora?: {
+        [k: string]: any;
+    } | undefined;
     mancer?: {
         [k: string]: any;
     } | undefined;
@@ -677,6 +680,9 @@ export type ImageGenerationProviderPreferencesOptions$Outbound = {
     "lynn-private"?: {
         [k: string]: any;
     } | undefined;
+    makora?: {
+        [k: string]: any;
+    } | undefined;
     mancer?: {
         [k: string]: any;
     } | undefined;

package/esm/models/imagegenerationproviderpreferences.js

@@ -91,6 +91,7 @@ export const ImageGenerationProviderPreferencesOptions$outboundSchema = z.object
     liquid: z.record(z.string(), z.any()).optional(),
     lynn: z.record(z.string(), z.any()).optional(),
     lynnPrivate: z.record(z.string(), z.any()).optional(),
+    makora: z.record(z.string(), z.any()).optional(),
     mancer: z.record(z.string(), z.any()).optional(),
     mancerOld: z.record(z.string(), z.any()).optional(),
     mara: z.record(z.string(), z.any()).optional(),

package/esm/models/operations/listbyokkeys.d.ts

@@ -79,6 +79,7 @@ export declare const Provider: {
     readonly Ionstream: "ionstream";
     readonly Krea: "krea";
     readonly Liquid: "liquid";
+    readonly Makora: "makora";
     readonly Mancer: "mancer";
     readonly Mara: "mara";
     readonly Meta: "meta";

package/esm/models/operations/listbyokkeys.js

@@ -62,6 +62,7 @@ export const Provider = {
     Ionstream: "ionstream",
     Krea: "krea",
     Liquid: "liquid",
+    Makora: "makora",
     Mancer: "mancer",
     Mara: "mara",
     Meta: "meta",

package/esm/models/providername.d.ts

@@ -54,6 +54,7 @@ export declare const ProviderName: {
     readonly InferactVLLM: "Inferact vLLM";
     readonly Inflection: "Inflection";
     readonly Liquid: "Liquid";
+    readonly Makora: "Makora";
     readonly Mara: "Mara";
     readonly Mancer2: "Mancer 2";
     readonly Meta: "Meta";

package/esm/models/providername.js

@@ -57,6 +57,7 @@ export const ProviderName = {
     InferactVLLM: "Inferact vLLM",
     Inflection: "Inflection",
     Liquid: "Liquid",
+    Makora: "Makora",
     Mara: "Mara",
     Mancer2: "Mancer 2",
     Meta: "Meta",

package/esm/models/provideroptions.d.ts

@@ -219,6 +219,9 @@ export type ProviderOptions = {
     lynnPrivate?: {
         [k: string]: any;
     } | undefined;
+    makora?: {
+        [k: string]: any;
+    } | undefined;
     mancer?: {
         [k: string]: any;
     } | undefined;
@@ -627,6 +630,9 @@ export type ProviderOptions$Outbound = {
     "lynn-private"?: {
         [k: string]: any;
     } | undefined;
+    makora?: {
+        [k: string]: any;
+    } | undefined;
     mancer?: {
         [k: string]: any;
     } | undefined;

package/esm/models/provideroptions.js

@@ -78,6 +78,7 @@ export const ProviderOptions$outboundSchema = z.object({
     liquid: z.record(z.string(), z.any()).optional(),
     lynn: z.record(z.string(), z.any()).optional(),
     lynnPrivate: z.record(z.string(), z.any()).optional(),
+    makora: z.record(z.string(), z.any()).optional(),
     mancer: z.record(z.string(), z.any()).optional(),
     mancerOld: z.record(z.string(), z.any()).optional(),
     mara: z.record(z.string(), z.any()).optional(),

package/esm/models/providerresponse.d.ts

@@ -86,6 +86,7 @@ export declare const ProviderResponseProviderName: {
     readonly InferactVLLM: "Inferact vLLM";
     readonly Inflection: "Inflection";
     readonly Liquid: "Liquid";
+    readonly Makora: "Makora";
     readonly Mara: "Mara";
     readonly Mancer2: "Mancer 2";
     readonly Meta: "Meta";

package/esm/models/providerresponse.js

@@ -90,6 +90,7 @@ export const ProviderResponseProviderName = {
     InferactVLLM: "Inferact vLLM",
     Inflection: "Inflection",
     Liquid: "Liquid",
+    Makora: "Makora",
     Mara: "Mara",
     Mancer2: "Mancer 2",
     Meta: "Meta",

package/esm/models/updatebyokkeyrequest.d.ts

@@ -1,5 +1,9 @@
 import * as z from "zod/v4";
 export type UpdateBYOKKeyRequest = {
+    /**
+     * Optional allowlist of OpenRouter API key hashes (`api_keys.hash`) that may use this credential. `null` clears the restriction. Must contain at least one hash if provided. Hashes that do not belong to your account return a 400.
+     */
+    allowedApiKeyHashes?: Array<string> | null | undefined;
     /**
      * Optional allowlist of model slugs this credential may be used for. `null` means no restriction.
      */
@@ -27,6 +31,7 @@ export type UpdateBYOKKeyRequest = {
 };
 /** @internal */
 export type UpdateBYOKKeyRequest$Outbound = {
+    allowed_api_key_hashes?: Array<string> | null | undefined;
     allowed_models?: Array<string> | null | undefined;
     allowed_user_ids?: Array<string> | null | undefined;
     disabled?: boolean | undefined;

package/esm/models/updatebyokkeyrequest.js

@@ -6,6 +6,7 @@ import * as z from "zod/v4";
 import { remap as remap$ } from "../lib/primitives.js";
 /** @internal */
 export const UpdateBYOKKeyRequest$outboundSchema = z.object({
+    allowedApiKeyHashes: z.nullable(z.array(z.string())).optional(),
     allowedModels: z.nullable(z.array(z.string())).optional(),
     allowedUserIds: z.nullable(z.array(z.string())).optional(),
     disabled: z.boolean().optional(),
@@ -14,6 +15,7 @@ export const UpdateBYOKKeyRequest$outboundSchema = z.object({
     name: z.nullable(z.string()).optional(),
 }).transform((v) => {
     return remap$(v, {
+        allowedApiKeyHashes: "allowed_api_key_hashes",
         allowedModels: "allowed_models",
         allowedUserIds: "allowed_user_ids",
         isFallback: "is_fallback",

package/esm/models/videogenerationrequest.d.ts

@@ -240,6 +240,9 @@ export type VideoGenerationRequestOptions = {
     lynnPrivate?: {
         [k: string]: any;
     } | undefined;
+    makora?: {
+        [k: string]: any;
+    } | undefined;
     mancer?: {
         [k: string]: any;
     } | undefined;
@@ -727,6 +730,9 @@ export type VideoGenerationRequestOptions$Outbound = {
     "lynn-private"?: {
         [k: string]: any;
     } | undefined;
+    makora?: {
+        [k: string]: any;
+    } | undefined;
     mancer?: {
         [k: string]: any;
     } | undefined;

package/esm/models/videogenerationrequest.js

@@ -109,6 +109,7 @@ export const VideoGenerationRequestOptions$outboundSchema = z.object({
     liquid: z.record(z.string(), z.any()).optional(),
     lynn: z.record(z.string(), z.any()).optional(),
     lynnPrivate: z.record(z.string(), z.any()).optional(),
+    makora: z.record(z.string(), z.any()).optional(),
     mancer: z.record(z.string(), z.any()).optional(),
     mancerOld: z.record(z.string(), z.any()).optional(),
     mara: z.record(z.string(), z.any()).optional(),

package/esm/sdk/byok.d.ts

@@ -16,7 +16,7 @@ export declare class BYOK extends ClientSDK {
      * Create a BYOK provider credential
      *
      * @remarks
-     * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys. [Management key](/docs/guides/overview/auth/management-api-keys) required.
      */
     create(request: operations.CreateBYOKKeyRequest, options?: RequestOptions): Promise<models.CreateBYOKKeyResponse>;
     /**
@@ -37,7 +37,7 @@ export declare class BYOK extends ClientSDK {
      * Update a BYOK provider credential
      *
      * @remarks
-     * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys (`null` clears the restriction). [Management key](/docs/guides/overview/auth/management-api-keys) required.
      */
     update(request: operations.UpdateBYOKKeyRequest, options?: RequestOptions): Promise<models.UpdateBYOKKeyResponse>;
 }

package/esm/sdk/byok.js

@@ -24,7 +24,7 @@ export class BYOK extends ClientSDK {
      * Create a BYOK provider credential
      *
      * @remarks
-     * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. When `workspace_id` is omitted, the credential is created in the default workspace; if that default has been deleted, the request returns a 400 and you must pass `workspace_id` explicitly. Treat the raw key as write-only; it is never returned after creation. Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys. [Management key](/docs/guides/overview/auth/management-api-keys) required.
      */
     async create(request, options) {
         return unwrapAsync(byokCreate(this, request, options));
@@ -51,7 +51,7 @@ export class BYOK extends ClientSDK {
      * Update a BYOK provider credential
      *
      * @remarks
-     * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Update an existing bring-your-own-key (BYOK) provider credential by its `id`. Include the `key` field to rotate the raw provider API key in-place (the previous key material is overwritten). Use `allowed_api_key_hashes` to restrict the credential to specific OpenRouter API keys (`null` clears the restriction). [Management key](/docs/guides/overview/auth/management-api-keys) required.
      */
     async update(request, options) {
         return unwrapAsync(byokUpdate(this, request, options));

package/jsr.json

@@ -2,7 +2,7 @@
 
 {
   "name": "@openrouter/sdk",
-  "version": "1.2.50",
+  "version": "1.2.52",
   "exports": {
     ".": "./src/index.ts",    
     "./models/errors": "./src/models/errors/index.ts",    

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrouter/sdk",
-  "version": "1.2.50",
+  "version": "1.2.52",
   "author": "OpenRouter",
   "description": "The OpenRouter TypeScript SDK is a type-safe toolkit for building AI applications with access to 400+ language models through a unified API.",
   "keywords": [
@@ -21,8 +21,8 @@
   "license": "Apache-2.0",
   "packageManager": "pnpm@10.22.0",
   "publishConfig": {
-    "access": "public",
-    "provenance": true
+    "provenance": true,
+    "access": "public"
   },
   "type": "module",
   "main": "./esm/index.js",
@@ -73,15 +73,15 @@
     "lint": "eslint --cache --max-warnings=0 src",
     "build": "tsc",
     "prepublishOnly": "npm run build",
-    "compile": "tsc",
     "prepare": "npm run build",
-    "test": "vitest --run --project unit",
     "test:e2e": "vitest --run --project e2e",
     "test:watch": "vitest --watch --project unit",
+    "typecheck": "tsc --noEmit",
+    "typecheck:transit": "exit 0",
     "postinstall": "node scripts/check-types.js || true",
+    "test": "vitest --run --project unit",
     "test:transit": "exit 0",
-    "typecheck": "tsc --noEmit",
-    "typecheck:transit": "exit 0"
+    "compile": "tsc"
   },
   "peerDependencies": {},
   "devDependencies": {