@vertesia/client 1.6.0-dev.20260912.110338Z → 1.6.0-dev.20260918.061604Z

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vertesia/client",
-  "version": "1.6.0-dev.20260912.110338Z",
+  "version": "1.6.0-dev.20260918.061604Z",
   "type": "module",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
@@ -13,14 +13,14 @@
   "devDependencies": {
     "@types/node": "^24.13.3",
     "@vertesia/tsconfig": "0.1.0",
-    "rolldown": "1.2.6",
+    "rolldown": "1.2.8",
     "typescript": "7.0.2",
-    "vitest": "^4.1.11"
+    "vitest": "5.0.0"
   },
   "dependencies": {
-    "@llumiverse/common": "1.6.0-dev.20260912.104205Z",
-    "@vertesia/api-fetch-client": "1.6.0-dev.20260912.110338Z",
-    "@vertesia/common": "1.6.0-dev.20260912.110338Z",
+    "@llumiverse/common": "1.6.0-dev.20260918.055633Z",
+    "@vertesia/api-fetch-client": "1.6.0-dev.20260918.061604Z",
+    "@vertesia/common": "1.6.0-dev.20260918.061604Z",
     "eventsource": "^5.1.1"
   },
   "exports": {
@@ -48,7 +48,7 @@
     "ai",
     "typescript"
   ],
-  "gitHead": "504e8df031c3950ec324c865385caf460b1c1cd7",
+  "gitHead": "ea552337206e77c256478b76e19b4235e70bf769",
   "scripts": {
     "lint": "biome lint src",
     "clean:lib": "rimraf ./lib ./tsconfig.tsbuildinfo",

package/src/AccountApi.ts

@@ -13,10 +13,14 @@ import type {
     User,
     UserInviteToken,
 } from '@vertesia/common';
+import AccountApiKeysApi from './AccountApiKeysApi.js';
 
 export default class AccountApi extends ApiTopic {
+    readonly apikeys: AccountApiKeysApi;
+
     constructor(parent: ClientBase) {
         super(parent, '/api/v1/account');
+        this.apikeys = new AccountApiKeysApi(parent);
     }
 
     /**

package/src/AccountApiKeysApi.ts

@@ -0,0 +1,29 @@
+import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
+import type {
+    AccountApiKey,
+    AccountApiKeyWithValue,
+    CreateAccountApiKeyPayload,
+    DeleteOperationResult,
+    UpdateAccountApiKeyPayload,
+} from '@vertesia/common';
+
+export default class AccountApiKeysApi extends ApiTopic {
+    constructor(parent: ClientBase) {
+        super(parent, '/api/v1/account/apikeys');
+    }
+    list(): Promise<AccountApiKey[]> {
+        return this.get('/');
+    }
+    retrieve(id: string): Promise<AccountApiKey> {
+        return this.get(`/${id}`);
+    }
+    create(payload: CreateAccountApiKeyPayload): Promise<AccountApiKeyWithValue> {
+        return this.post('/', { payload });
+    }
+    update(id: string, payload: UpdateAccountApiKeyPayload): Promise<AccountApiKey> {
+        return this.put(`/${id}`, { payload });
+    }
+    delete(id: string): Promise<DeleteOperationResult> {
+        return this.del(`/${id}`);
+    }
+}

package/src/bundle-isolation.test.ts

@@ -0,0 +1,37 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { describe, expect, it } from 'vitest';
+
+// Build outputs are required; Turbo runs this package's build before its tests.
+const path = (relative: string) => new URL(relative, import.meta.url).pathname;
+
+const CLIENT_BUNDLE = path('../lib/vertesia-client.js');
+/** `.` and `./node` in the client's exports map — the latter is `lib/nodejs/index.js`, not `lib/index.js`. */
+const CLIENT_ENTRIES = [
+    { label: 'client default entry (.)', file: path('../lib/index.js') },
+    { label: 'client node entry (./node)', file: path('../lib/nodejs/index.js') },
+];
+
+/** Markers that prove a runtime schema import leaked into a browser artifact. */
+const FORBIDDEN = ['zod', '_zod', 'ZodObject', 'api-schemas', 'toOpenApiComponents', 'ApiSchemaComponents'];
+
+function expectNoSchemaRuntime(file: string, label: string): void {
+    const contents = readFileSync(file, 'utf8');
+    for (const marker of FORBIDDEN) {
+        expect(contents, `${label} must not contain '${marker}'`).not.toContain(marker);
+    }
+}
+
+describe('@vertesia/client consumer runtime isolation', () => {
+    it('contains no zod import or schema registry code', () => {
+        // The client is served to the browser the same way common is, so importing
+        // `@vertesia/common/api-schemas` from an SDK method would ship zod to every UI user.
+        expectNoSchemaRuntime(CLIENT_BUNDLE, 'client browser bundle');
+    });
+
+    it.each(CLIENT_ENTRIES)('does not reference the api-schemas subpath from the $label', ({ label, file }) => {
+        // Asserted rather than skipped: a missing artifact means the entry moved or stopped being
+        // built, and silently passing would let a packaging regression through unnoticed.
+        expect(existsSync(file), `${label} not found at ${file} — has the exports map changed?`).toBe(true);
+        expect(readFileSync(file, 'utf8'), `${label} must not import api-schemas`).not.toContain('api-schemas');
+    });
+});