@openrouter/sdk 1.2.60 → 1.2.62

package/esm/funcs/apiKeysDelete.d.ts

@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
  * Delete an API key
  *
  * @remarks
- * Delete an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Delete an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
  */
 export declare function apiKeysDelete(client: OpenRouterCore, request: operations.DeleteKeysRequest, options?: RequestOptions): APIPromise<Result<operations.DeleteKeysResponse, errors.UnauthorizedResponseError | errors.NotFoundResponseError | errors.TooManyRequestsResponseError | errors.InternalServerResponseError | OpenRouterError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=apiKeysDelete.d.ts.map

package/esm/funcs/apiKeysDelete.js

@@ -16,7 +16,7 @@ import { APIPromise } from "../types/async.js";
  * Delete an API key
  *
  * @remarks
- * Delete an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Delete an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
  */
 export function apiKeysDelete(client, request, options) {
     return new APIPromise($do(client, request, options));

package/esm/funcs/apiKeysUpdate.d.ts

@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
  * Update an API key
  *
  * @remarks
- * Update an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Update an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
  */
 export declare function apiKeysUpdate(client: OpenRouterCore, request: operations.UpdateKeysRequest, options?: RequestOptions): APIPromise<Result<operations.UpdateKeysResponse, errors.BadRequestResponseError | errors.UnauthorizedResponseError | errors.NotFoundResponseError | errors.TooManyRequestsResponseError | errors.InternalServerResponseError | OpenRouterError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=apiKeysUpdate.d.ts.map

package/esm/funcs/apiKeysUpdate.js

@@ -16,7 +16,7 @@ import { APIPromise } from "../types/async.js";
  * Update an API key
  *
  * @remarks
- * Update an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+ * Update an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
  */
 export function apiKeysUpdate(client, request, options) {
     return new APIPromise($do(client, request, options));

package/esm/lib/config.d.ts

@@ -50,8 +50,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1.0.0";
-    readonly sdkVersion: "1.2.60";
+    readonly sdkVersion: "1.2.62";
     readonly genVersion: "2.914.0";
-    readonly userAgent: "speakeasy-sdk/typescript 1.2.60 2.914.0 1.0.0 @openrouter/sdk";
+    readonly userAgent: "speakeasy-sdk/typescript 1.2.62 2.914.0 1.0.0 @openrouter/sdk";
 };
 //# sourceMappingURL=config.d.ts.map

package/esm/lib/config.js

@@ -29,8 +29,8 @@ export function serverURLFromOptions(options) {
 export const SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.0.0",
-    sdkVersion: "1.2.60",
+    sdkVersion: "1.2.62",
     genVersion: "2.914.0",
-    userAgent: "speakeasy-sdk/typescript 1.2.60 2.914.0 1.0.0 @openrouter/sdk",
+    userAgent: "speakeasy-sdk/typescript 1.2.62 2.914.0 1.0.0 @openrouter/sdk",
 };
 //# sourceMappingURL=config.js.map

package/esm/models/containerautoenvironment.d.ts

@@ -1,12 +1,18 @@
 import * as z from "zod/v4";
+import { ContainerNetworkPolicy, ContainerNetworkPolicy$Outbound } from "./containernetworkpolicy.js";
 /**
  * An OpenRouter-managed, auto-provisioned ephemeral container.
  */
 export type ContainerAutoEnvironment = {
+    /**
+     * Network egress policy for the container. "disabled" blocks all outbound internet; "allowlist" permits only hosts matching the listed hostnames or * glob patterns (ports 80/443, DNS via Cloudflare resolvers). The policy is fixed when a container starts: sending a different policy to a warm container fails the request with a 409. Omitted: defaults to "disabled" (no outbound internet). For unrestricted egress, use an allowlist of ["*"].
+     */
+    networkPolicy?: ContainerNetworkPolicy | undefined;
     type: "container_auto";
 };
 /** @internal */
 export type ContainerAutoEnvironment$Outbound = {
+    network_policy?: ContainerNetworkPolicy$Outbound | undefined;
     type: "container_auto";
 };
 /** @internal */

package/esm/models/containerautoenvironment.js

@@ -3,9 +3,16 @@
  * @generated-id: 49526688017e
  */
 import * as z from "zod/v4";
+import { remap as remap$ } from "../lib/primitives.js";
+import { ContainerNetworkPolicy$outboundSchema, } from "./containernetworkpolicy.js";
 /** @internal */
 export const ContainerAutoEnvironment$outboundSchema = z.object({
+    networkPolicy: ContainerNetworkPolicy$outboundSchema.optional(),
     type: z.literal("container_auto"),
+}).transform((v) => {
+    return remap$(v, {
+        networkPolicy: "network_policy",
+    });
 });
 export function containerAutoEnvironmentToJSON(containerAutoEnvironment) {
     return JSON.stringify(ContainerAutoEnvironment$outboundSchema.parse(containerAutoEnvironment));

package/esm/models/containernetworkpolicy.d.ts

@@ -0,0 +1,42 @@
+import * as z from "zod/v4";
+export type ContainerNetworkPolicyAllowlist = {
+    /**
+     * Hostnames the container may reach over ports 80/443 (max 50). Entries are lowercase hostnames or glob patterns where * matches any run of characters (e.g. *.example.com). An exact hostname does not cover its subdomains — use a glob or list each hostname. pip needs both pypi.org and files.pythonhosted.org (or *.pythonhosted.org).
+     */
+    allowedDomains: Array<string>;
+    /**
+     * Outbound access restricted to the listed domains.
+     */
+    type: "allowlist";
+};
+export type ContainerNetworkPolicyDisabled = {
+    /**
+     * No outbound internet access.
+     */
+    type: "disabled";
+};
+/**
+ * Network egress policy for the container. "disabled" blocks all outbound internet; "allowlist" permits only hosts matching the listed hostnames or * glob patterns (ports 80/443, DNS via Cloudflare resolvers). The policy is fixed when a container starts: sending a different policy to a warm container fails the request with a 409. Omitted: defaults to "disabled" (no outbound internet). For unrestricted egress, use an allowlist of ["*"].
+ */
+export type ContainerNetworkPolicy = ContainerNetworkPolicyDisabled | ContainerNetworkPolicyAllowlist;
+/** @internal */
+export type ContainerNetworkPolicyAllowlist$Outbound = {
+    allowed_domains: Array<string>;
+    type: "allowlist";
+};
+/** @internal */
+export declare const ContainerNetworkPolicyAllowlist$outboundSchema: z.ZodType<ContainerNetworkPolicyAllowlist$Outbound, ContainerNetworkPolicyAllowlist>;
+export declare function containerNetworkPolicyAllowlistToJSON(containerNetworkPolicyAllowlist: ContainerNetworkPolicyAllowlist): string;
+/** @internal */
+export type ContainerNetworkPolicyDisabled$Outbound = {
+    type: "disabled";
+};
+/** @internal */
+export declare const ContainerNetworkPolicyDisabled$outboundSchema: z.ZodType<ContainerNetworkPolicyDisabled$Outbound, ContainerNetworkPolicyDisabled>;
+export declare function containerNetworkPolicyDisabledToJSON(containerNetworkPolicyDisabled: ContainerNetworkPolicyDisabled): string;
+/** @internal */
+export type ContainerNetworkPolicy$Outbound = ContainerNetworkPolicyDisabled$Outbound | ContainerNetworkPolicyAllowlist$Outbound;
+/** @internal */
+export declare const ContainerNetworkPolicy$outboundSchema: z.ZodType<ContainerNetworkPolicy$Outbound, ContainerNetworkPolicy>;
+export declare function containerNetworkPolicyToJSON(containerNetworkPolicy: ContainerNetworkPolicy): string;
+//# sourceMappingURL=containernetworkpolicy.d.ts.map

package/esm/models/containernetworkpolicy.js

@@ -0,0 +1,34 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: ee44c31a3adf
+ */
+import * as z from "zod/v4";
+import { remap as remap$ } from "../lib/primitives.js";
+/** @internal */
+export const ContainerNetworkPolicyAllowlist$outboundSchema = z.object({
+    allowedDomains: z.array(z.string()),
+    type: z.literal("allowlist"),
+}).transform((v) => {
+    return remap$(v, {
+        allowedDomains: "allowed_domains",
+    });
+});
+export function containerNetworkPolicyAllowlistToJSON(containerNetworkPolicyAllowlist) {
+    return JSON.stringify(ContainerNetworkPolicyAllowlist$outboundSchema.parse(containerNetworkPolicyAllowlist));
+}
+/** @internal */
+export const ContainerNetworkPolicyDisabled$outboundSchema = z.object({
+    type: z.literal("disabled"),
+});
+export function containerNetworkPolicyDisabledToJSON(containerNetworkPolicyDisabled) {
+    return JSON.stringify(ContainerNetworkPolicyDisabled$outboundSchema.parse(containerNetworkPolicyDisabled));
+}
+/** @internal */
+export const ContainerNetworkPolicy$outboundSchema = z.union([
+    z.lazy(() => ContainerNetworkPolicyDisabled$outboundSchema),
+    z.lazy(() => ContainerNetworkPolicyAllowlist$outboundSchema),
+]);
+export function containerNetworkPolicyToJSON(containerNetworkPolicy) {
+    return JSON.stringify(ContainerNetworkPolicy$outboundSchema.parse(containerNetworkPolicy));
+}
+//# sourceMappingURL=containernetworkpolicy.js.map

package/esm/models/containerreferenceenvironment.d.ts

@@ -1,4 +1,5 @@
 import * as z from "zod/v4";
+import { ContainerNetworkPolicy, ContainerNetworkPolicy$Outbound } from "./containernetworkpolicy.js";
 /**
  * Reference to a container by its canonical id — a previously returned container_id or a fresh name to create a persistent container.
  */
@@ -7,11 +8,16 @@ export type ContainerReferenceEnvironment = {
      * Canonical container id to reuse (max 40 characters, letters/digits/underscores/hyphens). Any container_id previously returned by a bash or shell tool result works here and reattaches to the same container and files — including session-derived ids (sess_...) and generation-derived ids (gen_...). Note that a session-derived id is always sess_ + the sanitized session key, which is not necessarily the raw session id you sent. Using the same container_id from both the bash and shell tools shares the same files, with last-write-wins when both flush concurrently. A fresh name creates a new persistent container. Containers are always scoped to your account and workspace.
      */
     containerId: string;
+    /**
+     * Network egress policy for the container. "disabled" blocks all outbound internet; "allowlist" permits only hosts matching the listed hostnames or * glob patterns (ports 80/443, DNS via Cloudflare resolvers). The policy is fixed when a container starts: sending a different policy to a warm container fails the request with a 409. Omitted: defaults to "disabled" (no outbound internet). For unrestricted egress, use an allowlist of ["*"].
+     */
+    networkPolicy?: ContainerNetworkPolicy | undefined;
     type: "container_reference";
 };
 /** @internal */
 export type ContainerReferenceEnvironment$Outbound = {
     container_id: string;
+    network_policy?: ContainerNetworkPolicy$Outbound | undefined;
     type: "container_reference";
 };
 /** @internal */

package/esm/models/containerreferenceenvironment.js

@@ -4,13 +4,16 @@
  */
 import * as z from "zod/v4";
 import { remap as remap$ } from "../lib/primitives.js";
+import { ContainerNetworkPolicy$outboundSchema, } from "./containernetworkpolicy.js";
 /** @internal */
 export const ContainerReferenceEnvironment$outboundSchema = z.object({
     containerId: z.string(),
+    networkPolicy: ContainerNetworkPolicy$outboundSchema.optional(),
     type: z.literal("container_reference"),
 }).transform((v) => {
     return remap$(v, {
         containerId: "container_id",
+        networkPolicy: "network_policy",
     });
 });
 export function containerReferenceEnvironmentToJSON(containerReferenceEnvironment) {

package/esm/models/index.d.ts

@@ -150,6 +150,7 @@ export * from "./conflictresponseerrordata.js";
 export * from "./containerautoenvironment.js";
 export * from "./containerfile.js";
 export * from "./containerfilelistresponse.js";
+export * from "./containernetworkpolicy.js";
 export * from "./containerreferenceenvironment.js";
 export * from "./contentfilteraction.js";
 export * from "./contentfilterbuiltinaction.js";

package/esm/models/index.js

@@ -154,6 +154,7 @@ export * from "./conflictresponseerrordata.js";
 export * from "./containerautoenvironment.js";
 export * from "./containerfile.js";
 export * from "./containerfilelistresponse.js";
+export * from "./containernetworkpolicy.js";
 export * from "./containerreferenceenvironment.js";
 export * from "./contentfilteraction.js";
 export * from "./contentfilterbuiltinaction.js";

package/esm/sdk/apikeys.d.ts

@@ -26,7 +26,7 @@ export declare class APIKeys extends ClientSDK {
      * Delete an API key
      *
      * @remarks
-     * Delete an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Delete an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
      */
     delete(request: operations.DeleteKeysRequest, options?: RequestOptions): Promise<operations.DeleteKeysResponse>;
     /**
@@ -40,7 +40,7 @@ export declare class APIKeys extends ClientSDK {
      * Update an API key
      *
      * @remarks
-     * Update an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Update an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
      */
     update(request: operations.UpdateKeysRequest, options?: RequestOptions): Promise<operations.UpdateKeysResponse>;
 }

package/esm/sdk/apikeys.js

@@ -42,7 +42,7 @@ export class APIKeys extends ClientSDK {
      * Delete an API key
      *
      * @remarks
-     * Delete an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Delete an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
      */
     async delete(request, options) {
         return unwrapAsync(apiKeysDelete(this, request, options));
@@ -60,7 +60,7 @@ export class APIKeys extends ClientSDK {
      * Update an API key
      *
      * @remarks
-     * Update an existing API key. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+     * Update an existing API key. Authenticate with a [management key](/docs/guides/overview/auth/management-api-keys), or with a Connect client secret. A client secret reaches only the keys that same client created; any other key responds as if it does not exist.
      */
     async update(request, options) {
         return unwrapAsync(apiKeysUpdate(this, request, options));

package/jsr.json

@@ -2,7 +2,7 @@
 
 {
   "name": "@openrouter/sdk",
-  "version": "1.2.60",
+  "version": "1.2.62",
   "exports": {
     ".": "./src/index.ts",    
     "./models/errors": "./src/models/errors/index.ts",    

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrouter/sdk",
-  "version": "1.2.60",
+  "version": "1.2.62",
   "author": "OpenRouter",
   "description": "The OpenRouter TypeScript SDK is a type-safe toolkit for building AI applications with access to 400+ language models through a unified API.",
   "keywords": [
@@ -73,15 +73,15 @@
     "lint": "eslint --cache --max-warnings=0 src",
     "build": "tsc",
     "prepublishOnly": "npm run build",
+    "test:watch": "vitest --watch --project unit",
     "typecheck:transit": "exit 0",
-    "compile": "tsc",
+    "prepare": "npm run build",
     "test": "vitest --run --project unit",
-    "test:e2e": "vitest --run --project e2e",
+    "test:transit": "exit 0",
     "typecheck": "tsc --noEmit",
+    "compile": "tsc",
     "postinstall": "node scripts/check-types.js || true",
-    "prepare": "npm run build",
-    "test:transit": "exit 0",
-    "test:watch": "vitest --watch --project unit"
+    "test:e2e": "vitest --run --project e2e"
   },
   "peerDependencies": {},
   "devDependencies": {