@openrouter/sdk 1.3.36 → 1.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (146) hide show
  1. package/esm/funcs/internsCreateIntern.d.ts +1 -1
  2. package/esm/funcs/internsCreateIntern.js +1 -1
  3. package/esm/funcs/internsDeleteIntern.d.ts +1 -1
  4. package/esm/funcs/internsDeleteIntern.js +1 -1
  5. package/esm/funcs/internsGetIntern.d.ts +1 -1
  6. package/esm/funcs/internsGetIntern.js +1 -1
  7. package/esm/funcs/internsGetInternDaemon.d.ts +1 -1
  8. package/esm/funcs/internsGetInternDaemon.js +1 -1
  9. package/esm/funcs/internsGetInternDaemonAccess.d.ts +1 -1
  10. package/esm/funcs/internsGetInternDaemonAccess.js +1 -1
  11. package/esm/funcs/internsListInterns.d.ts +1 -1
  12. package/esm/funcs/internsListInterns.js +1 -1
  13. package/esm/funcs/internsProvisionIntern.d.ts +1 -1
  14. package/esm/funcs/internsProvisionIntern.js +1 -1
  15. package/esm/funcs/internsSuspendIntern.d.ts +1 -1
  16. package/esm/funcs/internsSuspendIntern.js +1 -1
  17. package/esm/funcs/internsUpdateIntern.d.ts +1 -1
  18. package/esm/funcs/internsUpdateIntern.js +1 -1
  19. package/esm/funcs/privateEndpointsActivate.d.ts +19 -0
  20. package/esm/funcs/privateEndpointsActivate.js +103 -0
  21. package/esm/funcs/privateEndpointsCreate.d.ts +19 -0
  22. package/esm/funcs/privateEndpointsCreate.js +101 -0
  23. package/esm/funcs/privateEndpointsDelete.d.ts +19 -0
  24. package/esm/funcs/privateEndpointsDelete.js +107 -0
  25. package/esm/funcs/privateEndpointsDisable.d.ts +19 -0
  26. package/esm/funcs/privateEndpointsDisable.js +103 -0
  27. package/esm/funcs/privateEndpointsEnable.d.ts +19 -0
  28. package/esm/funcs/privateEndpointsEnable.js +103 -0
  29. package/esm/funcs/privateEndpointsGet.d.ts +19 -0
  30. package/esm/funcs/privateEndpointsGet.js +103 -0
  31. package/esm/funcs/privateEndpointsList.d.ts +19 -0
  32. package/esm/funcs/privateEndpointsList.js +97 -0
  33. package/esm/funcs/privateEndpointsUpdate.d.ts +19 -0
  34. package/esm/funcs/privateEndpointsUpdate.js +106 -0
  35. package/esm/funcs/privateEndpointsUpdatePricing.d.ts +19 -0
  36. package/esm/funcs/privateEndpointsUpdatePricing.js +106 -0
  37. package/esm/funcs/privateEndpointsValidate.d.ts +19 -0
  38. package/esm/funcs/privateEndpointsValidate.js +106 -0
  39. package/esm/funcs/vaultCopyVaultSecretsToIntern.d.ts +1 -1
  40. package/esm/funcs/vaultCopyVaultSecretsToIntern.js +1 -1
  41. package/esm/funcs/vaultDeleteInternVaultSecret.d.ts +1 -1
  42. package/esm/funcs/vaultDeleteInternVaultSecret.js +1 -1
  43. package/esm/funcs/vaultDeleteVaultSecret.d.ts +1 -1
  44. package/esm/funcs/vaultDeleteVaultSecret.js +1 -1
  45. package/esm/funcs/vaultListInternEffectiveVaultSecrets.d.ts +21 -0
  46. package/esm/funcs/vaultListInternEffectiveVaultSecrets.js +110 -0
  47. package/esm/funcs/vaultListInternVaultSecrets.d.ts +1 -1
  48. package/esm/funcs/vaultListInternVaultSecrets.js +1 -1
  49. package/esm/funcs/vaultListVaultSecrets.d.ts +1 -1
  50. package/esm/funcs/vaultListVaultSecrets.js +1 -1
  51. package/esm/funcs/vaultStoreInternVaultSecret.d.ts +1 -1
  52. package/esm/funcs/vaultStoreInternVaultSecret.js +1 -1
  53. package/esm/funcs/vaultStoreVaultSecret.d.ts +1 -1
  54. package/esm/funcs/vaultStoreVaultSecret.js +1 -1
  55. package/esm/lib/config.d.ts +2 -2
  56. package/esm/lib/config.js +2 -2
  57. package/esm/models/createprivateendpointrequest.d.ts +67 -0
  58. package/esm/models/createprivateendpointrequest.js +44 -0
  59. package/esm/models/createprivateendpointvalidationfailedresponseerror.d.ts +20 -0
  60. package/esm/models/createprivateendpointvalidationfailedresponseerror.js +27 -0
  61. package/esm/models/deleteprivateendpointresponse.d.ts +19 -0
  62. package/esm/models/deleteprivateendpointresponse.js +21 -0
  63. package/esm/models/errors/createprivateendpoint.d.ts +45 -0
  64. package/esm/models/errors/createprivateendpoint.js +53 -0
  65. package/esm/models/errors/createprivateendpointvalidationfailedresponseerror.d.ts +21 -0
  66. package/esm/models/errors/createprivateendpointvalidationfailedresponseerror.js +35 -0
  67. package/esm/models/errors/index.d.ts +2 -0
  68. package/esm/models/errors/index.js +2 -0
  69. package/esm/models/index.d.ts +23 -0
  70. package/esm/models/index.js +23 -0
  71. package/esm/models/listprivateendpointsresponse.d.ts +11 -0
  72. package/esm/models/listprivateendpointsresponse.js +15 -0
  73. package/esm/models/managedprivateendpoint.d.ts +47 -0
  74. package/esm/models/managedprivateendpoint.js +35 -0
  75. package/esm/models/managedprivateendpointresponse.d.ts +11 -0
  76. package/esm/models/managedprivateendpointresponse.js +15 -0
  77. package/esm/models/operations/activateprivateendpoint.d.ts +58 -0
  78. package/esm/models/operations/activateprivateendpoint.js +21 -0
  79. package/esm/models/operations/createprivateendpoint.d.ts +61 -0
  80. package/esm/models/operations/createprivateendpoint.js +25 -0
  81. package/esm/models/operations/deleteprivateendpoint.d.ts +77 -0
  82. package/esm/models/operations/deleteprivateendpoint.js +34 -0
  83. package/esm/models/operations/disableprivateendpoint.d.ts +58 -0
  84. package/esm/models/operations/disableprivateendpoint.js +21 -0
  85. package/esm/models/operations/enableprivateendpoint.d.ts +58 -0
  86. package/esm/models/operations/enableprivateendpoint.js +21 -0
  87. package/esm/models/operations/getprivateendpoint.d.ts +58 -0
  88. package/esm/models/operations/getprivateendpoint.js +21 -0
  89. package/esm/models/operations/index.d.ts +11 -0
  90. package/esm/models/operations/index.js +11 -0
  91. package/esm/models/operations/listinterneffectivevaultsecrets.d.ts +68 -0
  92. package/esm/models/operations/listinterneffectivevaultsecrets.js +23 -0
  93. package/esm/models/operations/listprivateendpoints.d.ts +53 -0
  94. package/esm/models/operations/listprivateendpoints.js +20 -0
  95. package/esm/models/operations/updateprivateendpoint.d.ts +61 -0
  96. package/esm/models/operations/updateprivateendpoint.js +24 -0
  97. package/esm/models/operations/updateprivateendpointpricing.d.ts +61 -0
  98. package/esm/models/operations/updateprivateendpointpricing.js +24 -0
  99. package/esm/models/operations/validateprivateendpoint.d.ts +61 -0
  100. package/esm/models/operations/validateprivateendpoint.js +24 -0
  101. package/esm/models/privateendpoint.d.ts +60 -0
  102. package/esm/models/privateendpoint.js +41 -0
  103. package/esm/models/privateendpointactivation.d.ts +18 -0
  104. package/esm/models/privateendpointactivation.js +18 -0
  105. package/esm/models/privateendpointcheck.d.ts +31 -0
  106. package/esm/models/privateendpointcheck.js +27 -0
  107. package/esm/models/privateendpointcheckreason.d.ts +30 -0
  108. package/esm/models/privateendpointcheckreason.js +29 -0
  109. package/esm/models/privateendpointdeclaredregion.d.ts +17 -0
  110. package/esm/models/privateendpointdeclaredregion.js +16 -0
  111. package/esm/models/privateendpointpricing.d.ts +28 -0
  112. package/esm/models/privateendpointpricing.js +23 -0
  113. package/esm/models/privateendpointresponse.d.ts +11 -0
  114. package/esm/models/privateendpointresponse.js +15 -0
  115. package/esm/models/privateendpointstatus.d.ts +17 -0
  116. package/esm/models/privateendpointstatus.js +16 -0
  117. package/esm/models/privateendpointsummary.d.ts +38 -0
  118. package/esm/models/privateendpointsummary.js +30 -0
  119. package/esm/models/privateendpointvalidation.d.ts +15 -0
  120. package/esm/models/privateendpointvalidation.js +16 -0
  121. package/esm/models/privateendpointvalidationnullable.d.ts +15 -0
  122. package/esm/models/privateendpointvalidationnullable.js +16 -0
  123. package/esm/models/privateendpointvalidationresponse.d.ts +11 -0
  124. package/esm/models/privateendpointvalidationresponse.js +15 -0
  125. package/esm/models/tokenexchangerequest.d.ts +4 -4
  126. package/esm/models/tokenexchangerequest.js +3 -3
  127. package/esm/models/updateprivateendpointpricingrequest.d.ts +16 -0
  128. package/esm/models/updateprivateendpointpricingrequest.js +14 -0
  129. package/esm/models/updateprivateendpointrequest.d.ts +45 -0
  130. package/esm/models/updateprivateendpointrequest.js +36 -0
  131. package/esm/models/validateprivateendpointrequest.d.ts +15 -0
  132. package/esm/models/validateprivateendpointrequest.js +18 -0
  133. package/esm/models/vaulteffectivesecret.d.ts +35 -0
  134. package/esm/models/vaulteffectivesecret.js +34 -0
  135. package/esm/models/vaulteffectivesecretlistresponse.d.ts +18 -0
  136. package/esm/models/vaulteffectivesecretlistresponse.js +21 -0
  137. package/esm/sdk/interns.d.ts +9 -9
  138. package/esm/sdk/interns.js +9 -9
  139. package/esm/sdk/privateendpoints.d.ts +76 -0
  140. package/esm/sdk/privateendpoints.js +109 -0
  141. package/esm/sdk/sdk.d.ts +3 -0
  142. package/esm/sdk/sdk.js +4 -0
  143. package/esm/sdk/vault.d.ts +14 -7
  144. package/esm/sdk/vault.js +17 -7
  145. package/jsr.json +1 -1
  146. package/package.json +8 -8
@@ -0,0 +1,106 @@
1
+ /*
2
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
3
+ * @generated-id: 5824e06c594a
4
+ */
5
+ import { encodeJSON, encodeSimple } from "../lib/encodings.js";
6
+ import { matchStatusCode } from "../lib/http.js";
7
+ import * as M from "../lib/matchers.js";
8
+ import { compactMap } from "../lib/primitives.js";
9
+ import { safeParse } from "../lib/schemas.js";
10
+ import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
11
+ import { pathToFunc } from "../lib/url.js";
12
+ import { BadGatewayResponseError$inboundSchema as errors_BadGatewayResponseError$inboundSchema } from "../models/errors/badgatewayresponseerror.js"; import { BadRequestResponseError$inboundSchema as errors_BadRequestResponseError$inboundSchema } from "../models/errors/badrequestresponseerror.js"; import { ConflictResponseError$inboundSchema as errors_ConflictResponseError$inboundSchema } from "../models/errors/conflictresponseerror.js"; import { ForbiddenResponseError$inboundSchema as errors_ForbiddenResponseError$inboundSchema } from "../models/errors/forbiddenresponseerror.js"; import { InternalServerResponseError$inboundSchema as errors_InternalServerResponseError$inboundSchema } from "../models/errors/internalserverresponseerror.js"; import { NotFoundResponseError$inboundSchema as errors_NotFoundResponseError$inboundSchema } from "../models/errors/notfoundresponseerror.js"; import { RequestTimeoutResponseError$inboundSchema as errors_RequestTimeoutResponseError$inboundSchema } from "../models/errors/requesttimeoutresponseerror.js"; import { UnauthorizedResponseError$inboundSchema as errors_UnauthorizedResponseError$inboundSchema } from "../models/errors/unauthorizedresponseerror.js"; import { UnprocessableEntityResponseError$inboundSchema as errors_UnprocessableEntityResponseError$inboundSchema } from "../models/errors/unprocessableentityresponseerror.js";
13
+ import { PrivateEndpointResponse$inboundSchema as models_PrivateEndpointResponse$inboundSchema } from "../models/privateendpointresponse.js";
14
+ import { UpdatePrivateEndpointPricingRequest$outboundSchema as operations_UpdatePrivateEndpointPricingRequest$outboundSchema } from "../models/operations/updateprivateendpointpricing.js";
15
+ import { APIPromise } from "../types/async.js";
16
+ /**
17
+ * Set private endpoint pricing
18
+ *
19
+ * @remarks
20
+ * Set the negotiated per-token rates reported for requests routed to this endpoint. Applies to drafts and active endpoints; new rates take effect for subsequent requests. [Management key](/docs/guides/overview/auth/management-api-keys) required.
21
+ */
22
+ export function privateEndpointsUpdatePricing(client, request, options) {
23
+ return new APIPromise($do(client, request, options));
24
+ }
25
+ async function $do(client, request, options) {
26
+ const parsed = safeParse(request, (value) => operations_UpdatePrivateEndpointPricingRequest$outboundSchema.parse(value), "Input validation failed");
27
+ if (!parsed.ok) {
28
+ return [parsed, { status: "invalid" }];
29
+ }
30
+ const payload = parsed.value;
31
+ const body = encodeJSON("body", payload.UpdatePrivateEndpointPricingRequest, {
32
+ explode: true,
33
+ });
34
+ const pathParams = {
35
+ id: encodeSimple("id", payload.id, {
36
+ explode: false,
37
+ charEncoding: "percent",
38
+ }),
39
+ };
40
+ const path = pathToFunc("/private-endpoints/{id}/pricing")(pathParams);
41
+ const headers = new Headers(compactMap({
42
+ "Content-Type": "application/json",
43
+ Accept: "application/json",
44
+ "HTTP-Referer": encodeSimple("HTTP-Referer", payload["HTTP-Referer"] ?? client._options.httpReferer, { explode: false, charEncoding: "none" }),
45
+ "X-OpenRouter-Categories": encodeSimple("X-OpenRouter-Categories", payload.appCategories ?? client._options.appCategories, { explode: false, charEncoding: "none" }),
46
+ "X-OpenRouter-Title": encodeSimple("X-OpenRouter-Title", payload.appTitle ?? client._options.appTitle, { explode: false, charEncoding: "none" }),
47
+ }));
48
+ const secConfig = await extractSecurity(client._options.apiKey);
49
+ const securityInput = secConfig == null ? {} : { apiKey: secConfig };
50
+ const requestSecurity = resolveGlobalSecurity(securityInput);
51
+ const context = {
52
+ options: client._options,
53
+ baseURL: options?.serverURL ?? client._baseURL ?? "",
54
+ operationID: "updatePrivateEndpointPricing",
55
+ oAuth2Scopes: null,
56
+ resolvedSecurity: requestSecurity,
57
+ securitySource: client._options.apiKey,
58
+ retryConfig: options?.retries
59
+ || client._options.retryConfig
60
+ || {
61
+ strategy: "backoff",
62
+ backoff: {
63
+ initialInterval: 500,
64
+ maxInterval: 60000,
65
+ exponent: 1.5,
66
+ maxElapsedTime: 3600000,
67
+ },
68
+ retryConnectionErrors: true,
69
+ }
70
+ || { strategy: "none" },
71
+ retryCodes: options?.retryCodes || ["5XX"],
72
+ };
73
+ const requestRes = client._createRequest(context, {
74
+ security: requestSecurity,
75
+ method: "PUT",
76
+ baseURL: options?.serverURL,
77
+ path: path,
78
+ headers: headers,
79
+ body: body,
80
+ userAgent: client._options.userAgent,
81
+ timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
82
+ }, options);
83
+ if (!requestRes.ok) {
84
+ return [requestRes, { status: "invalid" }];
85
+ }
86
+ const req = requestRes.value;
87
+ const doResult = await client._do(req, {
88
+ context,
89
+ isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
90
+ retryConfig: context.retryConfig,
91
+ retryCodes: context.retryCodes,
92
+ });
93
+ if (!doResult.ok) {
94
+ return [doResult, { status: "request-error", request: req }];
95
+ }
96
+ const response = doResult.value;
97
+ const responseFields = {
98
+ HttpMeta: { Response: response, Request: req },
99
+ };
100
+ const [result] = await M.match(M.json(200, models_PrivateEndpointResponse$inboundSchema), M.jsonErr(400, errors_BadRequestResponseError$inboundSchema), M.jsonErr(401, errors_UnauthorizedResponseError$inboundSchema), M.jsonErr(403, errors_ForbiddenResponseError$inboundSchema), M.jsonErr(404, errors_NotFoundResponseError$inboundSchema), M.jsonErr(408, errors_RequestTimeoutResponseError$inboundSchema), M.jsonErr(409, errors_ConflictResponseError$inboundSchema), M.jsonErr(422, errors_UnprocessableEntityResponseError$inboundSchema), M.jsonErr(500, errors_InternalServerResponseError$inboundSchema), M.jsonErr(502, errors_BadGatewayResponseError$inboundSchema), M.fail("4XX"), M.fail("5XX"))(response, req, { extraFields: responseFields });
101
+ if (!result.ok) {
102
+ return [result, { status: "complete", request: req, response }];
103
+ }
104
+ return [result, { status: "complete", request: req, response }];
105
+ }
106
+ //# sourceMappingURL=privateEndpointsUpdatePricing.js.map
@@ -0,0 +1,19 @@
1
+ import { OpenRouterCore } from "../core.js";
2
+ import { RequestOptions } from "../lib/sdks.js";
3
+ import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
4
+ import * as errors from "../models/errors/index.js";
5
+ import { OpenRouterError } from "../models/errors/openroutererror.js";
6
+ import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
7
+ import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
8
+ import * as models from "../models/index.js";
9
+ import * as operations from "../models/operations/index.js";
10
+ import { APIPromise } from "../types/async.js";
11
+ import { Result } from "../types/fp.js";
12
+ /**
13
+ * Validate a draft private endpoint
14
+ *
15
+ * @remarks
16
+ * Send a live test request to the draft endpoint using the given workspace's BYOK credential for its provider. A passing validation is required before activation. Failed checks return 200 with `passed: false`. [Management key](/docs/guides/overview/auth/management-api-keys) required.
17
+ */
18
+ export declare function privateEndpointsValidate(client: OpenRouterCore, request: operations.ValidatePrivateEndpointRequest, options?: RequestOptions): APIPromise<Result<models.PrivateEndpointValidationResponse, errors.BadRequestResponseError | errors.UnauthorizedResponseError | errors.ForbiddenResponseError | errors.NotFoundResponseError | errors.RequestTimeoutResponseError | errors.ConflictResponseError | errors.UnprocessableEntityResponseError | errors.InternalServerResponseError | errors.BadGatewayResponseError | OpenRouterError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
19
+ //# sourceMappingURL=privateEndpointsValidate.d.ts.map
@@ -0,0 +1,106 @@
1
+ /*
2
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
3
+ * @generated-id: 4337dd4863e1
4
+ */
5
+ import { encodeJSON, encodeSimple } from "../lib/encodings.js";
6
+ import { matchStatusCode } from "../lib/http.js";
7
+ import * as M from "../lib/matchers.js";
8
+ import { compactMap } from "../lib/primitives.js";
9
+ import { safeParse } from "../lib/schemas.js";
10
+ import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
11
+ import { pathToFunc } from "../lib/url.js";
12
+ import { BadGatewayResponseError$inboundSchema as errors_BadGatewayResponseError$inboundSchema } from "../models/errors/badgatewayresponseerror.js"; import { BadRequestResponseError$inboundSchema as errors_BadRequestResponseError$inboundSchema } from "../models/errors/badrequestresponseerror.js"; import { ConflictResponseError$inboundSchema as errors_ConflictResponseError$inboundSchema } from "../models/errors/conflictresponseerror.js"; import { ForbiddenResponseError$inboundSchema as errors_ForbiddenResponseError$inboundSchema } from "../models/errors/forbiddenresponseerror.js"; import { InternalServerResponseError$inboundSchema as errors_InternalServerResponseError$inboundSchema } from "../models/errors/internalserverresponseerror.js"; import { NotFoundResponseError$inboundSchema as errors_NotFoundResponseError$inboundSchema } from "../models/errors/notfoundresponseerror.js"; import { RequestTimeoutResponseError$inboundSchema as errors_RequestTimeoutResponseError$inboundSchema } from "../models/errors/requesttimeoutresponseerror.js"; import { UnauthorizedResponseError$inboundSchema as errors_UnauthorizedResponseError$inboundSchema } from "../models/errors/unauthorizedresponseerror.js"; import { UnprocessableEntityResponseError$inboundSchema as errors_UnprocessableEntityResponseError$inboundSchema } from "../models/errors/unprocessableentityresponseerror.js";
13
+ import { PrivateEndpointValidationResponse$inboundSchema as models_PrivateEndpointValidationResponse$inboundSchema } from "../models/privateendpointvalidationresponse.js";
14
+ import { ValidatePrivateEndpointRequest$outboundSchema as operations_ValidatePrivateEndpointRequest$outboundSchema } from "../models/operations/validateprivateendpoint.js";
15
+ import { APIPromise } from "../types/async.js";
16
+ /**
17
+ * Validate a draft private endpoint
18
+ *
19
+ * @remarks
20
+ * Send a live test request to the draft endpoint using the given workspace's BYOK credential for its provider. A passing validation is required before activation. Failed checks return 200 with `passed: false`. [Management key](/docs/guides/overview/auth/management-api-keys) required.
21
+ */
22
+ export function privateEndpointsValidate(client, request, options) {
23
+ return new APIPromise($do(client, request, options));
24
+ }
25
+ async function $do(client, request, options) {
26
+ const parsed = safeParse(request, (value) => operations_ValidatePrivateEndpointRequest$outboundSchema.parse(value), "Input validation failed");
27
+ if (!parsed.ok) {
28
+ return [parsed, { status: "invalid" }];
29
+ }
30
+ const payload = parsed.value;
31
+ const body = encodeJSON("body", payload.ValidatePrivateEndpointRequest, {
32
+ explode: true,
33
+ });
34
+ const pathParams = {
35
+ id: encodeSimple("id", payload.id, {
36
+ explode: false,
37
+ charEncoding: "percent",
38
+ }),
39
+ };
40
+ const path = pathToFunc("/private-endpoints/{id}/validate")(pathParams);
41
+ const headers = new Headers(compactMap({
42
+ "Content-Type": "application/json",
43
+ Accept: "application/json",
44
+ "HTTP-Referer": encodeSimple("HTTP-Referer", payload["HTTP-Referer"] ?? client._options.httpReferer, { explode: false, charEncoding: "none" }),
45
+ "X-OpenRouter-Categories": encodeSimple("X-OpenRouter-Categories", payload.appCategories ?? client._options.appCategories, { explode: false, charEncoding: "none" }),
46
+ "X-OpenRouter-Title": encodeSimple("X-OpenRouter-Title", payload.appTitle ?? client._options.appTitle, { explode: false, charEncoding: "none" }),
47
+ }));
48
+ const secConfig = await extractSecurity(client._options.apiKey);
49
+ const securityInput = secConfig == null ? {} : { apiKey: secConfig };
50
+ const requestSecurity = resolveGlobalSecurity(securityInput);
51
+ const context = {
52
+ options: client._options,
53
+ baseURL: options?.serverURL ?? client._baseURL ?? "",
54
+ operationID: "validatePrivateEndpoint",
55
+ oAuth2Scopes: null,
56
+ resolvedSecurity: requestSecurity,
57
+ securitySource: client._options.apiKey,
58
+ retryConfig: options?.retries
59
+ || client._options.retryConfig
60
+ || {
61
+ strategy: "backoff",
62
+ backoff: {
63
+ initialInterval: 500,
64
+ maxInterval: 60000,
65
+ exponent: 1.5,
66
+ maxElapsedTime: 3600000,
67
+ },
68
+ retryConnectionErrors: true,
69
+ }
70
+ || { strategy: "none" },
71
+ retryCodes: options?.retryCodes || ["5XX"],
72
+ };
73
+ const requestRes = client._createRequest(context, {
74
+ security: requestSecurity,
75
+ method: "POST",
76
+ baseURL: options?.serverURL,
77
+ path: path,
78
+ headers: headers,
79
+ body: body,
80
+ userAgent: client._options.userAgent,
81
+ timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
82
+ }, options);
83
+ if (!requestRes.ok) {
84
+ return [requestRes, { status: "invalid" }];
85
+ }
86
+ const req = requestRes.value;
87
+ const doResult = await client._do(req, {
88
+ context,
89
+ isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
90
+ retryConfig: context.retryConfig,
91
+ retryCodes: context.retryCodes,
92
+ });
93
+ if (!doResult.ok) {
94
+ return [doResult, { status: "request-error", request: req }];
95
+ }
96
+ const response = doResult.value;
97
+ const responseFields = {
98
+ HttpMeta: { Response: response, Request: req },
99
+ };
100
+ const [result] = await M.match(M.json(200, models_PrivateEndpointValidationResponse$inboundSchema), M.jsonErr(400, errors_BadRequestResponseError$inboundSchema), M.jsonErr(401, errors_UnauthorizedResponseError$inboundSchema), M.jsonErr(403, errors_ForbiddenResponseError$inboundSchema), M.jsonErr(404, errors_NotFoundResponseError$inboundSchema), M.jsonErr(408, errors_RequestTimeoutResponseError$inboundSchema), M.jsonErr(409, errors_ConflictResponseError$inboundSchema), M.jsonErr(422, errors_UnprocessableEntityResponseError$inboundSchema), M.jsonErr(500, errors_InternalServerResponseError$inboundSchema), M.jsonErr(502, errors_BadGatewayResponseError$inboundSchema), M.fail("4XX"), M.fail("5XX"))(response, req, { extraFields: responseFields });
101
+ if (!result.ok) {
102
+ return [result, { status: "complete", request: req, response }];
103
+ }
104
+ return [result, { status: "complete", request: req, response }];
105
+ }
106
+ //# sourceMappingURL=privateEndpointsValidate.js.map
@@ -13,7 +13,7 @@ import { Result } from "../types/fp.js";
13
13
  * Copy workspace secrets to an intern
14
14
  *
15
15
  * @remarks
16
- * Copies the named workspace secrets into one intern's scope, replacing any intern secret with the same name. Each copy keeps the source value and host bindings. Every name must exist in the workspace scope or the request fails with 404 and nothing is copied. A workspace secret whose `hosts` is `null` cannot be copied: the request fails with 409 and nothing is copied until that secret is stored again with hosts. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
16
+ * Copies the named workspace secrets into one intern's scope, replacing any intern secret with the same name. Each copy keeps the source value and host bindings. Every name must exist in the workspace scope or the request fails with 404 and nothing is copied. A workspace secret whose `hosts` is `null` cannot be copied: the request fails with 409 and nothing is copied until that secret is stored again with hosts. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
17
17
  *
18
18
  * If set, this operation will use {@link Security.apiKey} from the global security.
19
19
  */
@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
17
17
  * Copy workspace secrets to an intern
18
18
  *
19
19
  * @remarks
20
- * Copies the named workspace secrets into one intern's scope, replacing any intern secret with the same name. Each copy keeps the source value and host bindings. Every name must exist in the workspace scope or the request fails with 404 and nothing is copied. A workspace secret whose `hosts` is `null` cannot be copied: the request fails with 409 and nothing is copied until that secret is stored again with hosts. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
20
+ * Copies the named workspace secrets into one intern's scope, replacing any intern secret with the same name. Each copy keeps the source value and host bindings. Every name must exist in the workspace scope or the request fails with 404 and nothing is copied. A workspace secret whose `hosts` is `null` cannot be copied: the request fails with 409 and nothing is copied until that secret is stored again with hosts. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
21
  *
22
22
  * If set, this operation will use {@link Security.apiKey} from the global security.
23
23
  */
@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
12
12
  * Delete an intern secret
13
13
  *
14
14
  * @remarks
15
- * Deletes a secret stored for one intern. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
15
+ * Deletes a secret stored for one intern. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
16
16
  *
17
17
  * If set, this operation will use {@link Security.apiKey} from the global security.
18
18
  */
@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
17
17
  * Delete an intern secret
18
18
  *
19
19
  * @remarks
20
- * Deletes a secret stored for one intern. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
20
+ * Deletes a secret stored for one intern. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
21
  *
22
22
  * If set, this operation will use {@link Security.apiKey} from the global security.
23
23
  */
@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
12
12
  * Delete a workspace secret
13
13
  *
14
14
  * @remarks
15
- * Deletes a secret from the workspace of the authenticated API key. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
15
+ * Deletes a secret from the workspace of the authenticated API key. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
16
16
  *
17
17
  * If set, this operation will use {@link Security.apiKey} from the global security.
18
18
  */
@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
17
17
  * Delete a workspace secret
18
18
  *
19
19
  * @remarks
20
- * Deletes a secret from the workspace of the authenticated API key. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
20
+ * Deletes a secret from the workspace of the authenticated API key. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
21
  *
22
22
  * If set, this operation will use {@link Security.apiKey} from the global security.
23
23
  */
@@ -0,0 +1,21 @@
1
+ import { OpenRouterCore } from "../core.js";
2
+ import { RequestOptions } from "../lib/sdks.js";
3
+ import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
4
+ import * as errors from "../models/errors/index.js";
5
+ import { OpenRouterError } from "../models/errors/openroutererror.js";
6
+ import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
7
+ import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
8
+ import * as models from "../models/index.js";
9
+ import * as operations from "../models/operations/index.js";
10
+ import { APIPromise } from "../types/async.js";
11
+ import { Result } from "../types/fp.js";
12
+ /**
13
+ * List the secrets an intern receives
14
+ *
15
+ * @remarks
16
+ * Lists, one entry per name, the secret the intern's outbound requests receive: its own secrets, secrets from an attached vault, and workspace secrets, including ones stored before workspace-scoped storage. Where several vaults hold a name, the entry is the one that wins, in the order intern, attached, workspace. The same resolution decides what outbound requests receive, so this list and the intern's requests agree. `scope` says which vault the entry comes from. Responses carry metadata only, never values. Results are ordered by name and paginated with `limit` and `offset`. Returns 404 when the intern's attached vault is no longer available, since the intern then receives no secrets. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
17
+ *
18
+ * If set, this operation will use {@link Security.apiKey} from the global security.
19
+ */
20
+ export declare function vaultListInternEffectiveVaultSecrets(client: OpenRouterCore, request: operations.ListInternEffectiveVaultSecretsRequest, options?: RequestOptions): APIPromise<Result<models.VaultEffectiveSecretListResponse, errors.BadRequestResponseError | errors.UnauthorizedResponseError | errors.ForbiddenResponseError | errors.NotFoundResponseError | errors.RequestTimeoutResponseError | errors.TooManyRequestsResponseError | errors.InternalServerResponseError | errors.BadGatewayResponseError | errors.ServiceUnavailableResponseError | errors.GatewayTimeoutResponseError | OpenRouterError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
21
+ //# sourceMappingURL=vaultListInternEffectiveVaultSecrets.d.ts.map
@@ -0,0 +1,110 @@
1
+ /*
2
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
3
+ * @generated-id: f8d9b6f715e3
4
+ */
5
+ import { encodeFormQuery, encodeSimple } from "../lib/encodings.js";
6
+ import { matchStatusCode } from "../lib/http.js";
7
+ import * as M from "../lib/matchers.js";
8
+ import { compactMap } from "../lib/primitives.js";
9
+ import { safeParse } from "../lib/schemas.js";
10
+ import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
11
+ import { pathToFunc } from "../lib/url.js";
12
+ import { BadGatewayResponseError$inboundSchema as errors_BadGatewayResponseError$inboundSchema } from "../models/errors/badgatewayresponseerror.js"; import { BadRequestResponseError$inboundSchema as errors_BadRequestResponseError$inboundSchema } from "../models/errors/badrequestresponseerror.js"; import { ForbiddenResponseError$inboundSchema as errors_ForbiddenResponseError$inboundSchema } from "../models/errors/forbiddenresponseerror.js"; import { GatewayTimeoutResponseError$inboundSchema as errors_GatewayTimeoutResponseError$inboundSchema } from "../models/errors/gatewaytimeoutresponseerror.js"; import { InternalServerResponseError$inboundSchema as errors_InternalServerResponseError$inboundSchema } from "../models/errors/internalserverresponseerror.js"; import { NotFoundResponseError$inboundSchema as errors_NotFoundResponseError$inboundSchema } from "../models/errors/notfoundresponseerror.js"; import { RequestTimeoutResponseError$inboundSchema as errors_RequestTimeoutResponseError$inboundSchema } from "../models/errors/requesttimeoutresponseerror.js"; import { ServiceUnavailableResponseError$inboundSchema as errors_ServiceUnavailableResponseError$inboundSchema } from "../models/errors/serviceunavailableresponseerror.js"; import { TooManyRequestsResponseError$inboundSchema as errors_TooManyRequestsResponseError$inboundSchema } from "../models/errors/toomanyrequestsresponseerror.js"; import { UnauthorizedResponseError$inboundSchema as errors_UnauthorizedResponseError$inboundSchema } from "../models/errors/unauthorizedresponseerror.js";
13
+ import { VaultEffectiveSecretListResponse$inboundSchema as models_VaultEffectiveSecretListResponse$inboundSchema } from "../models/vaulteffectivesecretlistresponse.js";
14
+ import { ListInternEffectiveVaultSecretsRequest$outboundSchema as operations_ListInternEffectiveVaultSecretsRequest$outboundSchema } from "../models/operations/listinterneffectivevaultsecrets.js";
15
+ import { APIPromise } from "../types/async.js";
16
+ /**
17
+ * List the secrets an intern receives
18
+ *
19
+ * @remarks
20
+ * Lists, one entry per name, the secret the intern's outbound requests receive: its own secrets, secrets from an attached vault, and workspace secrets, including ones stored before workspace-scoped storage. Where several vaults hold a name, the entry is the one that wins, in the order intern, attached, workspace. The same resolution decides what outbound requests receive, so this list and the intern's requests agree. `scope` says which vault the entry comes from. Responses carry metadata only, never values. Results are ordered by name and paginated with `limit` and `offset`. Returns 404 when the intern's attached vault is no longer available, since the intern then receives no secrets. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
+ *
22
+ * If set, this operation will use {@link Security.apiKey} from the global security.
23
+ */
24
+ export function vaultListInternEffectiveVaultSecrets(client, request, options) {
25
+ return new APIPromise($do(client, request, options));
26
+ }
27
+ async function $do(client, request, options) {
28
+ const parsed = safeParse(request, (value) => operations_ListInternEffectiveVaultSecretsRequest$outboundSchema.parse(value), "Input validation failed");
29
+ if (!parsed.ok) {
30
+ return [parsed, { status: "invalid" }];
31
+ }
32
+ const payload = parsed.value;
33
+ const body = null;
34
+ const pathParams = {
35
+ internId: encodeSimple("internId", payload.internId, {
36
+ explode: false,
37
+ charEncoding: "percent",
38
+ }),
39
+ };
40
+ const path = pathToFunc("/vault/interns/{internId}/effective-secrets")(pathParams);
41
+ const query = encodeFormQuery({
42
+ "limit": payload.limit,
43
+ "offset": payload.offset,
44
+ });
45
+ const headers = new Headers(compactMap({
46
+ Accept: "application/json",
47
+ "HTTP-Referer": encodeSimple("HTTP-Referer", payload["HTTP-Referer"] ?? client._options.httpReferer, { explode: false, charEncoding: "none" }),
48
+ "X-OpenRouter-Categories": encodeSimple("X-OpenRouter-Categories", payload.appCategories ?? client._options.appCategories, { explode: false, charEncoding: "none" }),
49
+ "X-OpenRouter-Title": encodeSimple("X-OpenRouter-Title", payload.appTitle ?? client._options.appTitle, { explode: false, charEncoding: "none" }),
50
+ }));
51
+ const secConfig = await extractSecurity(client._options.apiKey);
52
+ const securityInput = secConfig == null ? {} : { apiKey: secConfig };
53
+ const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
54
+ const context = {
55
+ options: client._options,
56
+ baseURL: options?.serverURL ?? client._baseURL ?? "",
57
+ operationID: "listInternEffectiveVaultSecrets",
58
+ oAuth2Scopes: null,
59
+ resolvedSecurity: requestSecurity,
60
+ securitySource: client._options.apiKey,
61
+ retryConfig: options?.retries
62
+ || client._options.retryConfig
63
+ || {
64
+ strategy: "backoff",
65
+ backoff: {
66
+ initialInterval: 500,
67
+ maxInterval: 60000,
68
+ exponent: 1.5,
69
+ maxElapsedTime: 3600000,
70
+ },
71
+ retryConnectionErrors: true,
72
+ }
73
+ || { strategy: "none" },
74
+ retryCodes: options?.retryCodes || ["5XX"],
75
+ };
76
+ const requestRes = client._createRequest(context, {
77
+ security: requestSecurity,
78
+ method: "GET",
79
+ baseURL: options?.serverURL,
80
+ path: path,
81
+ headers: headers,
82
+ query: query,
83
+ body: body,
84
+ userAgent: client._options.userAgent,
85
+ timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
86
+ }, options);
87
+ if (!requestRes.ok) {
88
+ return [requestRes, { status: "invalid" }];
89
+ }
90
+ const req = requestRes.value;
91
+ const doResult = await client._do(req, {
92
+ context,
93
+ isErrorStatusCode: (statusCode) => matchStatusCode({ status: statusCode }, ["4XX", "5XX"]),
94
+ retryConfig: context.retryConfig,
95
+ retryCodes: context.retryCodes,
96
+ });
97
+ if (!doResult.ok) {
98
+ return [doResult, { status: "request-error", request: req }];
99
+ }
100
+ const response = doResult.value;
101
+ const responseFields = {
102
+ HttpMeta: { Response: response, Request: req },
103
+ };
104
+ const [result] = await M.match(M.json(200, models_VaultEffectiveSecretListResponse$inboundSchema), M.jsonErr(400, errors_BadRequestResponseError$inboundSchema), M.jsonErr(401, errors_UnauthorizedResponseError$inboundSchema), M.jsonErr(403, errors_ForbiddenResponseError$inboundSchema), M.jsonErr(404, errors_NotFoundResponseError$inboundSchema), M.jsonErr(408, errors_RequestTimeoutResponseError$inboundSchema), M.jsonErr(429, errors_TooManyRequestsResponseError$inboundSchema), M.jsonErr(500, errors_InternalServerResponseError$inboundSchema), M.jsonErr(502, errors_BadGatewayResponseError$inboundSchema), M.jsonErr(503, errors_ServiceUnavailableResponseError$inboundSchema), M.jsonErr(504, errors_GatewayTimeoutResponseError$inboundSchema), M.fail("4XX"), M.fail("5XX"))(response, req, { extraFields: responseFields });
105
+ if (!result.ok) {
106
+ return [result, { status: "complete", request: req, response }];
107
+ }
108
+ return [result, { status: "complete", request: req, response }];
109
+ }
110
+ //# sourceMappingURL=vaultListInternEffectiveVaultSecrets.js.map
@@ -13,7 +13,7 @@ import { Result } from "../types/fp.js";
13
13
  * List intern secrets
14
14
  *
15
15
  * @remarks
16
- * Lists secret metadata stored for one intern. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
16
+ * Lists secret metadata stored for one intern. The list includes secrets stored from the dashboard or at provisioning before workspace-scoped storage; where both exist under one name, the one stored through this API is listed. Those older secrets cannot be deleted or copied through this API, and storing the same name through this API replaces them. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
17
17
  *
18
18
  * If set, this operation will use {@link Security.apiKey} from the global security.
19
19
  */
@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
17
17
  * List intern secrets
18
18
  *
19
19
  * @remarks
20
- * Lists secret metadata stored for one intern. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
20
+ * Lists secret metadata stored for one intern. The list includes secrets stored from the dashboard or at provisioning before workspace-scoped storage; where both exist under one name, the one stored through this API is listed. Those older secrets cannot be deleted or copied through this API, and storing the same name through this API replaces them. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
21
  *
22
22
  * If set, this operation will use {@link Security.apiKey} from the global security.
23
23
  */
@@ -13,7 +13,7 @@ import { Result } from "../types/fp.js";
13
13
  * List workspace secrets
14
14
  *
15
15
  * @remarks
16
- * Lists secret metadata for the workspace of the authenticated API key. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
16
+ * Lists secret metadata for the workspace of the authenticated API key. The list includes secrets stored from the dashboard or at provisioning before workspace-scoped storage; where both exist under one name, the one stored through this API is listed. Those older secrets cannot be deleted or copied through this API, and storing the same name through this API replaces them. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
17
17
  *
18
18
  * If set, this operation will use {@link Security.apiKey} from the global security.
19
19
  */
@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
17
17
  * List workspace secrets
18
18
  *
19
19
  * @remarks
20
- * Lists secret metadata for the workspace of the authenticated API key. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
20
+ * Lists secret metadata for the workspace of the authenticated API key. The list includes secrets stored from the dashboard or at provisioning before workspace-scoped storage; where both exist under one name, the one stored through this API is listed. Those older secrets cannot be deleted or copied through this API, and storing the same name through this API replaces them. Responses contain names, bound hosts, fingerprints and creation times, never secret values. Results are ordered by name and paginated with `limit` and `offset`. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
21
  *
22
22
  * If set, this operation will use {@link Security.apiKey} from the global security.
23
23
  */
@@ -13,7 +13,7 @@ import { Result } from "../types/fp.js";
13
13
  * Store an intern secret
14
14
  *
15
15
  * @remarks
16
- * Creates or replaces a secret stored for one intern. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
16
+ * Creates or replaces a secret stored for one intern. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
17
17
  *
18
18
  * If set, this operation will use {@link Security.apiKey} from the global security.
19
19
  */
@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
17
17
  * Store an intern secret
18
18
  *
19
19
  * @remarks
20
- * Creates or replaces a secret stored for one intern. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
20
+ * Creates or replaces a secret stored for one intern. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
21
  *
22
22
  * If set, this operation will use {@link Security.apiKey} from the global security.
23
23
  */
@@ -13,7 +13,7 @@ import { Result } from "../types/fp.js";
13
13
  * Store a workspace secret
14
14
  *
15
15
  * @remarks
16
- * Creates or replaces a secret in the workspace of the authenticated API key. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
16
+ * Creates or replaces a secret in the workspace of the authenticated API key. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
17
17
  *
18
18
  * If set, this operation will use {@link Security.apiKey} from the global security.
19
19
  */
@@ -17,7 +17,7 @@ import { APIPromise } from "../types/async.js";
17
17
  * Store a workspace secret
18
18
  *
19
19
  * @remarks
20
- * Creates or replaces a secret in the workspace of the authenticated API key. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
20
+ * Creates or replaces a secret in the workspace of the authenticated API key. The value is encrypted at rest and released only to the exact hostnames in `hosts`. The response carries metadata only. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
21
21
  *
22
22
  * If set, this operation will use {@link Security.apiKey} from the global security.
23
23
  */
@@ -50,8 +50,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
50
50
  export declare const SDK_METADATA: {
51
51
  readonly language: "typescript";
52
52
  readonly openapiDocVersion: "1.0.0";
53
- readonly sdkVersion: "1.3.36";
53
+ readonly sdkVersion: "1.4.1";
54
54
  readonly genVersion: "2.914.0";
55
- readonly userAgent: "speakeasy-sdk/typescript 1.3.36 2.914.0 1.0.0 @openrouter/sdk";
55
+ readonly userAgent: "speakeasy-sdk/typescript 1.4.1 2.914.0 1.0.0 @openrouter/sdk";
56
56
  };
57
57
  //# sourceMappingURL=config.d.ts.map
package/esm/lib/config.js CHANGED
@@ -29,8 +29,8 @@ export function serverURLFromOptions(options) {
29
29
  export const SDK_METADATA = {
30
30
  language: "typescript",
31
31
  openapiDocVersion: "1.0.0",
32
- sdkVersion: "1.3.36",
32
+ sdkVersion: "1.4.1",
33
33
  genVersion: "2.914.0",
34
- userAgent: "speakeasy-sdk/typescript 1.3.36 2.914.0 1.0.0 @openrouter/sdk",
34
+ userAgent: "speakeasy-sdk/typescript 1.4.1 2.914.0 1.0.0 @openrouter/sdk",
35
35
  };
36
36
  //# sourceMappingURL=config.js.map