@vertesia/client 1.6.0-dev.20261004.085740Z → 1.6.0-dev.20261009.095813Z

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vertesia/client",
-  "version": "1.6.0-dev.20261004.085740Z",
+  "version": "1.6.0-dev.20261009.095813Z",
   "type": "module",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
@@ -12,16 +12,16 @@
   ],
   "license": "Apache-2.0",
   "devDependencies": {
-    "@types/node": "^24.13.6",
+    "@types/node": "^24.19.0",
     "@vertesia/tsconfig": "0.1.0",
-    "rolldown": "1.2.9",
+    "rolldown": "1.2.11",
     "typescript": "7.0.2",
-    "vitest": "5.0.1"
+    "vitest": "5.0.2"
   },
   "dependencies": {
-    "@llumiverse/common": "1.6.0-dev.20261004.083934Z",
-    "@vertesia/api-fetch-client": "1.6.0-dev.20261004.085740Z",
-    "@vertesia/common": "1.6.0-dev.20261004.085740Z",
+    "@llumiverse/common": "1.6.0-dev.20261009.095504Z",
+    "@vertesia/api-fetch-client": "1.6.0-dev.20261009.095813Z",
+    "@vertesia/common": "1.6.0-dev.20261009.095813Z",
     "eventsource": "^5.1.2"
   },
   "exports": {
@@ -49,7 +49,7 @@
     "ai",
     "typescript"
   ],
-  "gitHead": "b51b6dc9262f81f55e2424d1e57190060f6068d7",
+  "gitHead": "e45bc09ecf2de4c8fe8a8d39fb52c1521980e7b9",
   "scripts": {
     "lint": "biome lint src",
     "clean:lib": "rimraf ./lib ./tsconfig.tsbuildinfo",

package/src/AuditTrailApi.ts

@@ -1,9 +1,13 @@
 import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
 import type {
+    AuditAdoptionQuery,
+    AuditAdoptionResponse,
     AuditAggregationQuery,
     AuditAggregationResponse,
     AuditTrailQuery,
     AuditTrailResponse,
+    AuditUsageQuery,
+    AuditUsageResponse,
 } from '@vertesia/common';
 
 export default class AuditTrailApi extends ApiTopic {
@@ -33,4 +37,12 @@ export default class AuditTrailApi extends ApiTopic {
     aggregate(query: AuditAggregationQuery): Promise<AuditAggregationResponse> {
         return this.post('/aggregate', { payload: query });
     }
+
+    adoption(query: AuditAdoptionQuery = {}): Promise<AuditAdoptionResponse> {
+        return this.post('/adoption', { payload: query });
+    }
+
+    usage(query: AuditUsageQuery = {}): Promise<AuditUsageResponse> {
+        return this.post('/usage', { payload: query });
+    }
 }

package/src/client.ts

@@ -14,8 +14,6 @@ import { IamApi } from './IamApi.js';
 import InferenceProfilesApi from './InferenceProfilesApi.js';
 import InteractionConfigurationsApi from './InteractionConfigurationsApi.js';
 import InteractionsApi from './InteractionsApi.js';
-import InternalRunBudgetsApi from './InternalRunBudgetsApi.js';
-import InternalSecretsApi from './InternalSecretsApi.js';
 import OAuthClientsApi from './OAuthClientsApi.js';
 import OAuthGrantsApi from './OAuthGrantsApi.js';
 import OAuthProvidersApi from './OAuthProvidersApi.js';
@@ -128,8 +126,6 @@ export class VertesiaClient extends AbstractFetchClient<VertesiaClient> {
     oauthProviders: OAuthProvidersApi;
     remoteMcpConnections: RemoteMcpConnectionsApi;
     secrets: SecretsApi;
-    internalSecrets: InternalSecretsApi;
-    internalRunBudgets: InternalRunBudgetsApi;
 
     /**
      * Create a client from the given token.
@@ -261,8 +257,6 @@ export class VertesiaClient extends AbstractFetchClient<VertesiaClient> {
         this.oauthProviders = new OAuthProvidersApi(this);
         this.remoteMcpConnections = new RemoteMcpConnectionsApi(this);
         this.secrets = new SecretsApi(this);
-        this.internalSecrets = new InternalSecretsApi(this);
-        this.internalRunBudgets = new InternalRunBudgetsApi(this);
     }
 
     withApiVersion(version: string | number | null) {

package/src/execute.ts

@@ -62,7 +62,7 @@ export async function executeInteraction<P = unknown>(
         if (response.status === ExecutionRunStatus.failed) {
             return response;
         }
-        await handleStreaming(client, response.id, onChunk);
+        return handleStreaming<P>(client, response.id, onChunk);
     }
     return response;
 }
@@ -105,13 +105,17 @@ export async function executeInteractionByName<P = unknown>(
         if (response.status === ExecutionRunStatus.failed) {
             return response;
         }
-        await handleStreaming(client, response.id, onChunk);
+        return handleStreaming<P>(client, response.id, onChunk);
     }
     return response;
 }
 
-function handleStreaming(client: VertesiaClient, runId: string, onChunk: (chunk: string) => void) {
-    return new Promise((resolve, reject) => {
+function handleStreaming<P>(
+    client: VertesiaClient,
+    runId: string,
+    onChunk: (chunk: string) => void,
+): Promise<InteractionExecutionResult<P>> {
+    return new Promise<InteractionExecutionResult<P>>((resolve, reject) => {
         void (async () => {
             try {
                 const EventSourceImpl = await EventSourceProvider();
@@ -133,6 +137,7 @@ function handleStreaming(client: VertesiaClient, runId: string, onChunk: (chunk:
                             onChunk?.(data);
                         }
                     } catch (err) {
+                        sse.close();
                         reject(err);
                     }
                 });
@@ -145,6 +150,12 @@ function handleStreaming(client: VertesiaClient, runId: string, onChunk: (chunk:
                         reject(err);
                     }
                 });
+                sse.addEventListener('error', () => {
+                    if (sse.readyState === EventSourceImpl.CLOSED) {
+                        sse.close();
+                        reject(new Error('Interaction result stream closed before completion'));
+                    }
+                });
             } catch (err) {
                 reject(err);
             }

package/src/index.ts

@@ -7,9 +7,6 @@ export { default as DelegationGrantsApi } from './DelegationGrantsApi.js';
 export type { GroupsQueryOptions } from './GroupsApi.js';
 export * from './InteractionBase.js';
 export * from './InteractionOutput.js';
-export { default as InternalAccountsApi } from './InternalAccountsApi.js';
-export { default as InternalRunBudgetsApi } from './InternalRunBudgetsApi.js';
-export { default as InternalSecretsApi } from './InternalSecretsApi.js';
 export * from './managed-sse.js';
 export { default as OAuthClientsApi } from './OAuthClientsApi.js';
 export { default as OAuthGrantsApi } from './OAuthGrantsApi.js';

package/src/managed-sse.ts

@@ -101,6 +101,7 @@ export function openManagedEventSource<T>(options: ManagedEventSourceOptions<T>)
         }
         cleanupCurrentSource();
         const connectionDuration = connectionOpenedAt ? Date.now() - connectionOpenedAt : 0;
+        connectionOpenedAt = 0;
         if (connectionDuration > 5000) {
             reconnectAttempts = 0;
         }
@@ -147,11 +148,7 @@ export function openManagedEventSource<T>(options: ManagedEventSourceOptions<T>)
                 return;
             }
             const url = await resolveUrl(options.url);
-            if (
-                lastEventId &&
-                options.last_event_id_query_param &&
-                !url.searchParams.has(options.last_event_id_query_param)
-            ) {
+            if (lastEventId && options.last_event_id_query_param) {
                 url.searchParams.set(options.last_event_id_query_param, lastEventId);
             }
             withAccessToken(url, await options.get_access_token?.());

package/src/store/AgentsApi.ts

@@ -406,7 +406,7 @@ export class AgentsApi extends ApiTopic {
                 currentSse.close();
                 currentSse = null;
             }
-            if (signal && abortHandler) {
+            if (isClosed && signal && abortHandler) {
                 signal.removeEventListener('abort', abortHandler);
                 abortHandler = null;
             }
@@ -459,13 +459,14 @@ export class AgentsApi extends ApiTopic {
             try {
                 // Resume from the last message we handed to the caller, whether it came from
                 // history, SSE, or an earlier poll. The server returns messages with ts > since.
-                const recent = await this.retrieveMessages(id, lastMessageTimestamp || undefined);
+                const previousMessageTimestamp = lastMessageTimestamp;
+                const recent = await this.retrieveMessages(id, previousMessageTimestamp || undefined);
                 polledMessages = true;
                 for (const msg of recent) {
                     if (isClosed) return;
                     const timestamp = msg.timestamp || 0;
-                    if (timestamp <= lastMessageTimestamp) continue;
-                    lastMessageTimestamp = timestamp;
+                    if (timestamp <= previousMessageTimestamp) continue;
+                    lastMessageTimestamp = Math.max(lastMessageTimestamp, timestamp);
                     if (onMessage) onMessage(msg, exit);
                     if (isClosed) return;
                     if (shouldCloseAgentRunStream(msg, id, options?.closeOnIdle)) {

package/src/store/CostApi.ts

@@ -23,14 +23,6 @@ export class CostApi extends ApiTopic {
         return this.post('/analytics', { payload: query });
     }
 
-    /**
-     * Get platform-wide cost analytics across all customers.
-     * Requires Vertesia staff privileges. Defaults to group_by='account'.
-     */
-    getGlobalAnalytics(query: CostAnalyticsQuery = {}): Promise<CostAnalyticsResponse> {
-        return this.post('/analytics/global', { payload: query });
-    }
-
     /**
      * Get current list prices and effective prices for the selected period.
      */

package/src/store/WorkflowsApi.ts

@@ -212,7 +212,7 @@ export class WorkflowsApi extends ApiTopic {
                     currentSse.close();
                     currentSse = null;
                 }
-                if (signal && abortHandler) {
+                if (isClosed && signal && abortHandler) {
                     signal.removeEventListener('abort', abortHandler);
                     abortHandler = null;
                 }
@@ -349,12 +349,14 @@ export class WorkflowsApi extends ApiTopic {
                                 `Failed to reconnect to SSE stream for run ${runId} after ${maxReconnectAttempts} attempts`,
                             );
                             isClosed = true;
+                            cleanup();
                             reject(
                                 new Error(`SSE connection failed after ${maxReconnectAttempts} reconnection attempts`),
                             );
                         }
                     };
                 } catch (err) {
+                    if (isClosed) return;
                     console.error('Error setting up SSE stream:', err);
                     if (reconnectAttempts < maxReconnectAttempts) {
                         const delay = calculateBackoffDelay(reconnectAttempts);
@@ -366,6 +368,8 @@ export class WorkflowsApi extends ApiTopic {
                             }
                         }, delay);
                     } else {
+                        isClosed = true;
+                        cleanup();
                         reject(err);
                     }
                 }

package/src/store/signed-url.ts

@@ -36,6 +36,33 @@ export interface SignedUrlFetchOptions {
     retryableStatuses?: ReadonlySet<number>;
 }
 
+const AZURE_BLOB_HOST_SUFFIX = '.blob.core.windows.net';
+
+/** Whether a signed URL points at Azure Blob Storage (a SAS URL on `<account>.blob.core.windows.net`). */
+export function isAzureBlobUrl(url: string): boolean {
+    try {
+        return new URL(url).hostname.toLowerCase().endsWith(AZURE_BLOB_HOST_SUFFIX);
+    } catch {
+        return false;
+    }
+}
+
+/**
+ * The headers for a `PUT` of file content to a signed upload URL.
+ *
+ * Azure's Put Blob rejects a request without `x-ms-blob-type`, so it is added for Azure Blob URLs
+ * only. GCS and S3 requests are left untouched: from a browser every extra header must be allowed
+ * by the bucket's CORS policy, and a header those backends do not expect would fail the preflight.
+ */
+export function signedUrlUploadHeaders(
+    url: string,
+    headers?: Record<string, string>,
+): Record<string, string> | undefined {
+    if (!isAzureBlobUrl(url)) return headers;
+    if (headers && Object.keys(headers).some((name) => name.toLowerCase() === 'x-ms-blob-type')) return headers;
+    return { ...headers, 'x-ms-blob-type': 'BlockBlob' };
+}
+
 function sleep(ms: number): Promise<void> {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -145,6 +172,9 @@ async function toReplayableBody(body: BodyInit | null | undefined): Promise<Body
  * `Retry-After` response header up to 60 seconds. Longer delays return the response
  * without retrying so the caller can schedule recovery outside this request.
  *
+ * A `PUT` to an Azure Blob SAS URL gets the `x-ms-blob-type` header it requires (see
+ * {@link signedUrlUploadHeaders}).
+ *
  * The returned `Response` is only guaranteed to be retried while it carries a
  * retryable status; a non-retryable error response (e.g. 403, 404) is returned
  * as-is for the caller to handle.
@@ -160,12 +190,13 @@ export async function fetchSignedUrl(url: string, options: SignedUrlFetchOptions
     } = options;
 
     const body = await toReplayableBody(options.body);
+    const requestHeaders = method.toUpperCase() === 'PUT' ? signedUrlUploadHeaders(url, headers) : headers;
 
     let lastError: unknown;
     for (let attempt = 0; attempt < attempts; attempt++) {
         const isLastAttempt = attempt === attempts - 1;
         try {
-            const res = await fetch(url, { method, headers, body });
+            const res = await fetch(url, { method, headers: requestHeaders, body });
             if (res.ok || !retryableStatuses.has(res.status) || isLastAttempt) {
                 return res;
             }

package/lib/InternalAccountsApi.d.ts

@@ -1,7 +0,0 @@
-import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
-import type { AccountApiVersionPolicy } from '@vertesia/common';
-export default class InternalAccountsApi extends ApiTopic {
-    constructor(parent: ClientBase);
-    getApiVersionPolicy(accountId: string): Promise<AccountApiVersionPolicy>;
-}
-//# sourceMappingURL=InternalAccountsApi.d.ts.map

package/lib/InternalAccountsApi.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"InternalAccountsApi.d.ts","sourceRoot":"","sources":["../src/InternalAccountsApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhE,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,QAAQ;IACrD,YAAY,MAAM,EAAE,UAAU,EAE7B;IAED,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEvE;CACJ"}

package/lib/InternalAccountsApi.js

@@ -1,10 +0,0 @@
-import { ApiTopic } from '@vertesia/api-fetch-client';
-export default class InternalAccountsApi extends ApiTopic {
-    constructor(parent) {
-        super(parent, '/internal/accounts');
-    }
-    getApiVersionPolicy(accountId) {
-        return this.get(`/${encodeURIComponent(accountId)}/api-version-policy`);
-    }
-}
-//# sourceMappingURL=InternalAccountsApi.js.map

package/lib/InternalAccountsApi.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"InternalAccountsApi.js","sourceRoot":"","sources":["../src/InternalAccountsApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,4BAA4B,CAAC;AAGvE,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,QAAQ;IACrD,YAAY,MAAkB;QAC1B,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,mBAAmB,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC5E,CAAC;CACJ"}

package/lib/InternalRunBudgetsApi.d.ts

@@ -1,8 +0,0 @@
-import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
-import type { ReadRunBudgetUsagePayload, RunBudgetTotals } from '@vertesia/common';
-/** Workload-authenticated accounting operations. Ordinary user tokens are not accepted. */
-export default class InternalRunBudgetsApi extends ApiTopic {
-    constructor(parent: ClientBase);
-    usage(payload: ReadRunBudgetUsagePayload): Promise<RunBudgetTotals>;
-}
-//# sourceMappingURL=InternalRunBudgetsApi.d.ts.map

package/lib/InternalRunBudgetsApi.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"InternalRunBudgetsApi.d.ts","sourceRoot":"","sources":["../src/InternalRunBudgetsApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnF,2FAA2F;AAC3F,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,QAAQ;IACvD,YAAY,MAAM,EAAE,UAAU,EAE7B;IAED,KAAK,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,eAAe,CAAC,CAElE;CACJ"}

package/lib/InternalRunBudgetsApi.js

@@ -1,11 +0,0 @@
-import { ApiTopic } from '@vertesia/api-fetch-client';
-/** Workload-authenticated accounting operations. Ordinary user tokens are not accepted. */
-export default class InternalRunBudgetsApi extends ApiTopic {
-    constructor(parent) {
-        super(parent, '/internal/run-budget');
-    }
-    usage(payload) {
-        return this.post('/usage', { payload });
-    }
-}
-//# sourceMappingURL=InternalRunBudgetsApi.js.map

package/lib/InternalRunBudgetsApi.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"InternalRunBudgetsApi.js","sourceRoot":"","sources":["../src/InternalRunBudgetsApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,4BAA4B,CAAC;AAGvE,2FAA2F;AAC3F,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,QAAQ;IACvD,YAAY,MAAkB;QAC1B,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAkC;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;CACJ"}

package/lib/InternalSecretsApi.d.ts

@@ -1,18 +0,0 @@
-import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
-import type { EventIngestSigningSecretRequest, EventIngestSigningSecretResponse, EventWebhookSigningSecretRequest, EventWebhookSigningSecretResponse, GithubInstallationTokenRequest, GithubInstallationTokenResponse, SignEventWebhookRequest, SignEventWebhookResponse, VerifyEventIngestSignatureRequest, VerifyEventIngestSignatureResponse } from '@vertesia/common';
-export default class InternalSecretsApi extends ApiTopic {
-    constructor(parent: ClientBase);
-    rotateEventWebhookSigningSecret(subscriptionId: string, payload: EventWebhookSigningSecretRequest): Promise<EventWebhookSigningSecretResponse>;
-    deleteEventWebhookSigningSecret(subscriptionId: string, payload: EventWebhookSigningSecretRequest): Promise<{
-        deleted: true;
-    }>;
-    signEventWebhook(subscriptionId: string, payload: SignEventWebhookRequest): Promise<SignEventWebhookResponse>;
-    rotateEventIngestChannelSigningSecret(channelId: string, payload: EventIngestSigningSecretRequest): Promise<EventIngestSigningSecretResponse>;
-    deleteEventIngestChannelSigningSecret(channelId: string, payload: EventIngestSigningSecretRequest): Promise<{
-        deleted: true;
-    }>;
-    verifyEventIngestSignature(channelId: string, payload: VerifyEventIngestSignatureRequest): Promise<VerifyEventIngestSignatureResponse>;
-    /** Mint a short-lived, repository-scoped GitHub App installation token for the project. */
-    mintGithubInstallationToken(payload: GithubInstallationTokenRequest): Promise<GithubInstallationTokenResponse>;
-}
-//# sourceMappingURL=InternalSecretsApi.d.ts.map

package/lib/InternalSecretsApi.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"InternalSecretsApi.d.ts","sourceRoot":"","sources":["../src/InternalSecretsApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EACR,+BAA+B,EAC/B,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,8BAA8B,EAC9B,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,iCAAiC,EACjC,kCAAkC,EACrC,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,QAAQ;IACpD,YAAY,MAAM,EAAE,UAAU,EAE7B;IAED,+BAA+B,CAC3B,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,gCAAgC,GAC1C,OAAO,CAAC,iCAAiC,CAAC,CAE5C;IAED,+BAA+B,CAC3B,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,gCAAgC,GAC1C,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAE5B;IAED,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAE5G;IAED,qCAAqC,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,+BAA+B,GACzC,OAAO,CAAC,gCAAgC,CAAC,CAE3C;IAED,qCAAqC,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,+BAA+B,GACzC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAE5B;IAED,0BAA0B,CACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iCAAiC,GAC3C,OAAO,CAAC,kCAAkC,CAAC,CAE7C;IAED,2FAA2F;IAC3F,2BAA2B,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAE7G;CACJ"}

package/lib/InternalSecretsApi.js

@@ -1,29 +0,0 @@
-import { ApiTopic } from '@vertesia/api-fetch-client';
-export default class InternalSecretsApi extends ApiTopic {
-    constructor(parent) {
-        super(parent, '/internal/secrets');
-    }
-    rotateEventWebhookSigningSecret(subscriptionId, payload) {
-        return this.post(`/event-webhooks/${subscriptionId}/rotate`, { payload });
-    }
-    deleteEventWebhookSigningSecret(subscriptionId, payload) {
-        return this.post(`/event-webhooks/${subscriptionId}/delete`, { payload });
-    }
-    signEventWebhook(subscriptionId, payload) {
-        return this.post(`/event-webhooks/${subscriptionId}/sign`, { payload });
-    }
-    rotateEventIngestChannelSigningSecret(channelId, payload) {
-        return this.post(`/event-ingest-channels/${channelId}/rotate`, { payload });
-    }
-    deleteEventIngestChannelSigningSecret(channelId, payload) {
-        return this.post(`/event-ingest-channels/${channelId}/delete`, { payload });
-    }
-    verifyEventIngestSignature(channelId, payload) {
-        return this.post(`/event-ingest-channels/${channelId}/verify`, { payload });
-    }
-    /** Mint a short-lived, repository-scoped GitHub App installation token for the project. */
-    mintGithubInstallationToken(payload) {
-        return this.post('/github/installation-token', { payload });
-    }
-}
-//# sourceMappingURL=InternalSecretsApi.js.map

package/lib/InternalSecretsApi.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"InternalSecretsApi.js","sourceRoot":"","sources":["../src/InternalSecretsApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,4BAA4B,CAAC;AAcvE,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,QAAQ;IACpD,YAAY,MAAkB;QAC1B,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,+BAA+B,CAC3B,cAAsB,EACtB,OAAyC;QAEzC,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,cAAc,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,+BAA+B,CAC3B,cAAsB,EACtB,OAAyC;QAEzC,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,cAAc,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,gBAAgB,CAAC,cAAsB,EAAE,OAAgC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,cAAc,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,qCAAqC,CACjC,SAAiB,EACjB,OAAwC;QAExC,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,SAAS,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,qCAAqC,CACjC,SAAiB,EACjB,OAAwC;QAExC,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,SAAS,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,0BAA0B,CACtB,SAAiB,EACjB,OAA0C;QAE1C,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,SAAS,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,2FAA2F;IAC3F,2BAA2B,CAAC,OAAuC;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;CACJ"}

package/src/InternalAccountsApi.ts

@@ -1,12 +0,0 @@
-import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
-import type { AccountApiVersionPolicy } from '@vertesia/common';
-
-export default class InternalAccountsApi extends ApiTopic {
-    constructor(parent: ClientBase) {
-        super(parent, '/internal/accounts');
-    }
-
-    getApiVersionPolicy(accountId: string): Promise<AccountApiVersionPolicy> {
-        return this.get(`/${encodeURIComponent(accountId)}/api-version-policy`);
-    }
-}

package/src/InternalRunBudgetsApi.ts

@@ -1,13 +0,0 @@
-import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
-import type { ReadRunBudgetUsagePayload, RunBudgetTotals } from '@vertesia/common';
-
-/** Workload-authenticated accounting operations. Ordinary user tokens are not accepted. */
-export default class InternalRunBudgetsApi extends ApiTopic {
-    constructor(parent: ClientBase) {
-        super(parent, '/internal/run-budget');
-    }
-
-    usage(payload: ReadRunBudgetUsagePayload): Promise<RunBudgetTotals> {
-        return this.post('/usage', { payload });
-    }
-}

package/src/InternalSecretsApi.ts

@@ -1,63 +0,0 @@
-import { ApiTopic, type ClientBase } from '@vertesia/api-fetch-client';
-import type {
-    EventIngestSigningSecretRequest,
-    EventIngestSigningSecretResponse,
-    EventWebhookSigningSecretRequest,
-    EventWebhookSigningSecretResponse,
-    GithubInstallationTokenRequest,
-    GithubInstallationTokenResponse,
-    SignEventWebhookRequest,
-    SignEventWebhookResponse,
-    VerifyEventIngestSignatureRequest,
-    VerifyEventIngestSignatureResponse,
-} from '@vertesia/common';
-
-export default class InternalSecretsApi extends ApiTopic {
-    constructor(parent: ClientBase) {
-        super(parent, '/internal/secrets');
-    }
-
-    rotateEventWebhookSigningSecret(
-        subscriptionId: string,
-        payload: EventWebhookSigningSecretRequest,
-    ): Promise<EventWebhookSigningSecretResponse> {
-        return this.post(`/event-webhooks/${subscriptionId}/rotate`, { payload });
-    }
-
-    deleteEventWebhookSigningSecret(
-        subscriptionId: string,
-        payload: EventWebhookSigningSecretRequest,
-    ): Promise<{ deleted: true }> {
-        return this.post(`/event-webhooks/${subscriptionId}/delete`, { payload });
-    }
-
-    signEventWebhook(subscriptionId: string, payload: SignEventWebhookRequest): Promise<SignEventWebhookResponse> {
-        return this.post(`/event-webhooks/${subscriptionId}/sign`, { payload });
-    }
-
-    rotateEventIngestChannelSigningSecret(
-        channelId: string,
-        payload: EventIngestSigningSecretRequest,
-    ): Promise<EventIngestSigningSecretResponse> {
-        return this.post(`/event-ingest-channels/${channelId}/rotate`, { payload });
-    }
-
-    deleteEventIngestChannelSigningSecret(
-        channelId: string,
-        payload: EventIngestSigningSecretRequest,
-    ): Promise<{ deleted: true }> {
-        return this.post(`/event-ingest-channels/${channelId}/delete`, { payload });
-    }
-
-    verifyEventIngestSignature(
-        channelId: string,
-        payload: VerifyEventIngestSignatureRequest,
-    ): Promise<VerifyEventIngestSignatureResponse> {
-        return this.post(`/event-ingest-channels/${channelId}/verify`, { payload });
-    }
-
-    /** Mint a short-lived, repository-scoped GitHub App installation token for the project. */
-    mintGithubInstallationToken(payload: GithubInstallationTokenRequest): Promise<GithubInstallationTokenResponse> {
-        return this.post('/github/installation-token', { payload });
-    }
-}