@vertesia/common 1.2.0 → 1.4.0-dev.20260614.160504Z

package/lib/{types/workflow-analytics.d.ts → workflow-analytics.d.ts}

@@ -45,7 +45,7 @@ export declare enum TelemetryToolType {
  */
 export interface BaseAgentEvent {
     /** Type of the event */
-    eventType: string;
+    eventType: AgentEventType;
     /** ISO 8601 timestamp */
     timestamp: string;
     /** Globally unique ID for this agent run */
@@ -114,7 +114,7 @@ export interface AgentRunCompletedEvent extends BaseAgentEvent {
  * Emitted for each LLM call (start/resume conversation)
  * Note: model, environmentId, environmentType are required (override base optional)
  */
-export interface LlmCallEvent extends BaseAgentEvent {
+interface BaseLlmCallEvent extends BaseAgentEvent {
     eventType: AgentEventType.LlmCall;
     /** Number of input/prompt tokens */
     promptTokens: number;
@@ -141,6 +141,8 @@ export interface LlmCallEvent extends BaseAgentEvent {
     /** Error type if failed */
     errorType?: string;
 }
+export interface LlmCallEvent extends BaseLlmCallEvent {
+}
 /**
  * Emitted when a tool call completes (success or failure).
  * Contains all information about the tool execution including parameters and results.
@@ -198,7 +200,10 @@ export interface NestedInteractionEvent extends LlmCallEvent {
     /** Tool type - same pattern as ToolCallEvent */
     toolType: TelemetryToolType;
 }
-export type AgentEvent = AgentRunStartedEvent | AgentRunCompletedEvent | LlmCallEvent | ToolCallEvent | CheckpointCreatedEvent | NestedInteractionEvent;
+/**
+ * @discriminator eventType
+ */
+export type AgentEvent = AgentRunStartedEvent | AgentRunCompletedEvent | LlmCallEvent | ToolCallEvent;
 /**
  * Workflow Analytics Types
  *
@@ -791,3 +796,5 @@ export interface FirstResponseBehaviorAnalyticsResponse {
     /** Time series data if resolution was specified */
     timeSeries?: FirstResponseBehaviorTimeSeriesPoint[];
 }
+export {};
+//# sourceMappingURL=workflow-analytics.d.ts.map

package/lib/workflow-analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-analytics.d.ts","sourceRoot":"","sources":["../src/workflow-analytics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;GAEG;AACH,oBAAY,cAAc;IACtB,eAAe,sBAAsB;IACrC,iBAAiB,wBAAwB;IACzC,OAAO,aAAa;IACpB,QAAQ,cAAc;CACzB;AAED;;GAEG;AACH,oBAAY,WAAW;IACnB,iCAAiC;IACjC,KAAK,UAAU;IACf,iCAAiC;IACjC,WAAW,iBAAiB;IAC5B,iCAAiC;IACjC,UAAU,gBAAgB;IAC1B,2DAA2D;IAC3D,UAAU,eAAe;IACzB,gDAAgD;IAChD,iBAAiB,uBAAuB;CAC3C;AAED;;GAEG;AACH,oBAAY,iBAAiB;IACzB,0CAA0C;IAC1C,OAAO,YAAY;IACnB,8BAA8B;IAC9B,WAAW,gBAAgB;IAC3B,uBAAuB;IACvB,MAAM,WAAW;IACjB,kBAAkB;IAClB,KAAK,UAAU;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,wBAAwB;IACxB,SAAS,EAAE,cAAc,CAAC;IAC1B,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,eAAe,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IACxD,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC;IAC1C,kDAAkD;IAClD,WAAW,EAAE,OAAO,CAAC;IACrB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC1D,SAAS,EAAE,cAAc,CAAC,iBAAiB,CAAC;IAC5C,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,4BAA4B;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,WAAW,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,0DAA0D;IAC1D,eAAe,CAAC,EAAE;QACd,mCAAmC;QACnC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;QAC9B,6DAA6D;QAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACL;AAMD;;;GAGG;AACH,UAAU,gBAAiB,SAAQ,cAAc;IAC7C,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC;IAClC,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iDAAiD;IACjD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,yGAAyG;IACzG,QAAQ,EAAE,WAAW,CAAC;IACtB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,gBAAgB;CAAG;AAMzD;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,cAAc;IACjD,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC;IACnC,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kCAAkC;IAClC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC;AAMD;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IACxD,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC;IACjC,uEAAuE;IACvE,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sCAAsC;IACtC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IACxD,QAAQ,EAAE,WAAW,CAAC,iBAAiB,CAAC;IACxC,iEAAiE;IACjE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,QAAQ,EAAE,iBAAiB,CAAC;CAC/B;AAMD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,oBAAoB,GAAG,sBAAsB,GAAG,YAAY,GAAG,aAAa,CAAC;AAEtG;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAEvF;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAC9B,OAAO,GACP,aAAa,GACb,MAAM,GACN,UAAU,GACV,OAAO,GACP,WAAW,CAAC;AAElB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,CAAC,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC;IAC/D,uCAAuC;IACvC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACvC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,4CAA4C;IAC5C,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,uBAAuB;IACvB,MAAM,CAAC,EAAE,uBAAuB,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,0BAA0B;IAChF,6BAA6B;IAC7B,UAAU,CAAC,EAAE,2BAA2B,CAAC;IACzC,oGAAoG;IACpG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,OAAO,CAAC,EAAE,wBAAwB,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA8B,SAAQ,0BAA0B;IAC7E,oCAAoC;IACpC,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA4B,SAAQ,0BAA0B;IAC3E,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qCAAqC;IACrC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,KAAK,EAAE,iBAAiB,CAAC;IACzB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,KAAK,EAAE,iBAAiB,CAAC;IACzB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,QAAQ,EAAE,aAAa,CAAC;IACxB,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,OAAO,EAAE,YAAY,CAAC;IACtB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,OAAO,EAAE,YAAY,CAAC;IACtB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB;IAChB,QAAQ,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,OAAO,CAAC;IACzD,4BAA4B;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,kCAAkC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mCAAmC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,UAAU,EAAE;QACR,CAAC,aAAa,EAAE,MAAM,GAAG;YACrB,oCAAoC;YACpC,SAAS,EAAE,kBAAkB,EAAE,CAAC;YAChC,8BAA8B;YAC9B,gBAAgB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACL,CAAC;CACL;AAMD;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACrC,6BAA6B;IAC7B,SAAS,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACd,CAAC;IACF,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,4EAA4E;IAC5E,uBAAuB,EAAE,iBAAiB,CAAC;IAC3C,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,sBAAsB;IACtB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,uCAAuC;IACvC,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACtC,mDAAmD;IACnD,UAAU,CAAC,EAAE,yBAAyB,EAAE,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACrC,sBAAsB;IACtB,OAAO,EAAE,aAAa,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,uCAAuC;IACvC,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,mDAAmD;IACnD,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,sBAAsB;IACtB,OAAO,EAAE,YAAY,CAAC;IACtB,8BAA8B;IAC9B,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5B,uCAAuC;IACvC,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,mDAAmD;IACnD,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,yBAAyB;IACzB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,6BAA6B;IAC7B,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC3C,+BAA+B;IAC/B,SAAS,EAAE,sBAAsB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC7C,mBAAmB;IACnB,OAAO,EAAE,wBAAwB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,sCAAsC;IACnD,wDAAwD;IACxD,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,sEAAsE;IACtE,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;IAC1C,4EAA4E;IAC5E,UAAU,EAAE,qBAAqB,EAAE,CAAC;CACvC;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IACxB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,eAAe,EAAE,MAAM,CAAC;IACxB,4BAA4B;IAC5B,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,wCAAwC;IACxC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,mCAAmC;IACnC,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC3C,4DAA4D;IAC5D,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IACzC,oDAAoD;IACpD,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACvC,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IAC/C,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD,sBAAsB;IACtB,OAAO,EAAE,0BAA0B,CAAC;IACpC,mDAAmD;IACnD,UAAU,CAAC,EAAE,kCAAkC,EAAE,CAAC;CACrD;AAMD;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IACzC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,eAAe,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,oBAAoB,EAAE,MAAM,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,sCAAsC;IACnD,sBAAsB;IACtB,OAAO,EAAE,4BAA4B,CAAC;IACtC,mDAAmD;IACnD,UAAU,CAAC,EAAE,oCAAoC,EAAE,CAAC;CACvD"}

package/lib/workflow-analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-analytics.js","sourceRoot":"","sources":["../src/workflow-analytics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,cAKX;AALD,WAAY,cAAc;IACtB,uDAAqC,CAAA;IACrC,2DAAyC,CAAA;IACzC,sCAAoB,CAAA;IACpB,wCAAsB,CAAA;AAC1B,CAAC,EALW,cAAc,KAAd,cAAc,QAKzB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,WAWX;AAXD,WAAY,WAAW;IACnB,iCAAiC;IACjC,8BAAe,CAAA;IACf,iCAAiC;IACjC,2CAA4B,CAAA;IAC5B,iCAAiC;IACjC,yCAA0B,CAAA;IAC1B,2DAA2D;IAC3D,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,uDAAwC,CAAA;AAC5C,CAAC,EAXW,WAAW,KAAX,WAAW,QAWtB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,iBASX;AATD,WAAY,iBAAiB;IACzB,0CAA0C;IAC1C,wCAAmB,CAAA;IACnB,8BAA8B;IAC9B,gDAA2B,CAAA;IAC3B,uBAAuB;IACvB,sCAAiB,CAAA;IACjB,kBAAkB;IAClB,oCAAe,CAAA;AACnB,CAAC,EATW,iBAAiB,KAAjB,iBAAiB,QAS5B"}

package/package.json

@@ -1,32 +1,33 @@
 {
   "name": "@vertesia/common",
-  "version": "1.2.0",
+  "version": "1.4.0-dev.20260614.160504Z",
   "license": "Apache-2.0",
   "type": "module",
-  "types": "./lib/types/index.d.ts",
+  "main": "./lib/index.js",
+  "types": "./lib/index.d.ts",
   "files": [
     "lib",
     "src",
     "tsconfig.dist.json"
   ],
   "exports": {
-    "types": "./lib/types/index.d.ts",
-    "import": "./lib/esm/index.js",
-    "require": "./lib/cjs/index.js"
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    }
   },
   "devDependencies": {
-    "@rollup/plugin-commonjs": "^28.0.3",
-    "@rollup/plugin-node-resolve": "^16.0.1",
-    "@rollup/plugin-terser": "^0.4.4",
-    "@rollup/plugin-typescript": "^12.1.2",
-    "rollup": "^4.59.0",
-    "ts-dual-module": "^0.6.3",
-    "typescript": "^6.0.2",
-    "vitest": "^4.0.16"
+    "@rollup/plugin-commonjs": "^29.0.3",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@rollup/plugin-terser": "^1.0.0",
+    "rollup": "^4.61.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.8",
+    "@vertesia/tsconfig": "0.1.0"
   },
   "dependencies": {
-    "ajv": "^8.17.1",
-    "@llumiverse/common": "1.1.1-dev.20260505.151157Z"
+    "ajv": "^8.20.0",
+    "@llumiverse/common": "1.3.0"
   },
   "repository": {
     "type": "git",
@@ -41,12 +42,11 @@
     "ai",
     "typescript"
   ],
-  "ts_dual_module": {
-    "outDir": "lib"
-  },
   "scripts": {
+    "lint": "biome lint src",
     "test": "vitest run",
-    "build": "pnpm exec tsmod build && pnpm exec rollup -c",
-    "clean": "rimraf ./node_modules ./lib ./tsconfig.tsbuildinfo"
+    "typecheck:test": "tsc -p tsconfig.test.json --noEmit",
+    "build": "rm -rf ./lib ./tsconfig.tsbuildinfo && tsc && pnpm exec rollup -c",
+    "clean": "rm -rf ./node_modules ./lib ./tsconfig.tsbuildinfo"
   }
 }

package/src/Progress.ts

@@ -1,7 +1,10 @@
-
 class ProgressSpan {
     unitsDone: number;
-    constructor(public parent: Progress, public parentUnits: number, public spanUnits: number) {
+    constructor(
+        public parent: Progress,
+        public parentUnits: number,
+        public spanUnits: number,
+    ) {
         this.unitsDone = 0;
     }
 
@@ -12,11 +15,11 @@ class ProgressSpan {
             units = remaining;
         }
         this.unitsDone += units;
-        this.parent.done(units * this.parentUnits / this.spanUnits);
+        this.parent.done((units * this.parentUnits) / this.spanUnits);
     }
 
     get parentUnitsDone() {
-        return Math.round(this.unitsDone * this.parentUnits / this.spanUnits);
+        return Math.round((this.unitsDone * this.parentUnits) / this.spanUnits);
     }
 
     get isDone() {
@@ -27,8 +30,7 @@ class ProgressSpan {
 export class Progress {
     unitsDone: number = 0;
 
-    constructor(public total: number) {
-    }
+    constructor(public total: number) {}
 
     get fraction() {
         return this.unitsDone / this.total;
@@ -54,4 +56,4 @@ export class Progress {
     span(units: number, spanUnits?: number): ProgressSpan {
         return new ProgressSpan(this, units, spanUnits || units);
     }
-}
+}

package/src/access-control.ts

@@ -4,69 +4,112 @@
  * Access control interfaces
  */
 
-import { ProjectRoles } from "./project.js";
+import type { ProjectRoles } from './project.js';
 
 export enum Permission {
-    int_read = "interaction:read",
-    int_write = "interaction:write",
-    int_delete = "interaction:delete",
-
-    int_execute = "interaction:execute",
-    run_read = "run:read",
-    run_write = "run:write",
-
-    env_admin = "environment:admin",
-
-    project_admin = "project:admin",
-    project_integration_read = "project:integration_read",
-    project_settings_write = "project:settings_write",
-
-    api_key_create = "api_key:create",
-    api_key_read = "api_key:read",
-    api_key_update = "api_key:update",
-    api_key_delete = "api_key:delete",
-
-    account_read = "account:read",
-    account_write = "account:write",
-    account_admin = "account:admin",
-    manage_billing = "account:billing",
+    int_read = 'interaction:read',
+    int_write = 'interaction:write',
+    int_delete = 'interaction:delete',
+
+    int_execute = 'interaction:execute',
+    run_read = 'run:read',
+    run_write = 'run:write',
+
+    env_admin = 'environment:admin',
+
+    app_manage = 'app:manage',
+    project_admin = 'project:admin',
+    project_integration_read = 'project:integration_read',
+    project_settings_write = 'project:settings_write',
+
+    api_key_create = 'api_key:create',
+    api_key_read = 'api_key:read',
+    api_key_secret_read = 'api_key:secret_read',
+    api_key_update = 'api_key:update',
+    api_key_delete = 'api_key:delete',
+
+    account_read = 'account:read',
+    account_write = 'account:write',
+    account_admin = 'account:admin',
+    manage_billing = 'account:billing',
     /** View cost and usage analytics */
-    billing_read = "billing:read",
-    account_member = "account:member",
+    billing_read = 'billing:read',
+    /** View account and project audit events. */
+    audit_read = 'audit:read',
+    account_member = 'account:member',
 
+    content_read = 'content:read',
+    content_read_all = 'content:read_all',
+    content_write = 'content:write',
+    content_delete = 'content:delete',
+    content_admin = 'content:admin', //manage schemas
+    content_superadmin = 'content:superadmin', // list all objects and collections
 
-    content_read = "content:read",
-    content_write = "content:write",
-    content_delete = "content:delete",
-    content_admin = "content:admin", //manage schemas
-    content_superadmin = "content:superadmin", // list all objects and collections
+    workflow_read = 'workflow:read',
+    workflow_run = 'workflow:run',
+    workflow_admin = 'workflow:admin',
+    workflow_superadmin = 'workflow:superadmin',
 
+    agent_run_read = 'agent_run:read',
 
-    workflow_run = "workflow:run",
-    workflow_admin = "workflow:admin",
-    workflow_superadmin = "workflow:superadmin",
+    task_read = 'task:read',
+    task_manage = 'task:manage',
 
-    iam_impersonate = "iam:impersonate",
+    iam_impersonate = 'iam:impersonate',
 
     /** whether the user has access to Sutdio App. */
-    studio_access = "studio:access",
+    studio_access = 'studio:access',
 }
 
 export enum AccessControlResourceType {
-    project = "project",
-    environment = "environment",
-    account = "account",
-    interaction = "interaction",
-    app = "application",
+    project = 'project',
+    environment = 'environment',
+    account = 'account',
+    interaction = 'interaction',
+    app = 'application',
+    /** Dynamic resource matching by content properties at query time. */
+    content_set = 'content_set',
 }
 
 export enum AccessControlPrincipalType {
-    user = "user",
-    group = "group",
-    apikey = "apikey",
+    user = 'user',
+    group = 'group',
+    apikey = 'apikey',
+    /** Dynamic principal matching by user/group properties at token time. */
+    principal_set = 'principal_set',
 }
 
+/**
+ * MongoDB query syntax subset for matching properties.
+ * Keys are property names, values are either direct match values or operator objects.
+ * Supported operators: `$eq`, `$ne`, `$gt`, `$gte`, `$lt`, `$lte`, `$in`, `$nin`, `$exists`, `$empty`, `$like`.
+ *
+ * In `resource_props`, values can reference principal properties using the `$principal.` prefix.
+ * These are resolved at token time by substituting the user's merged property value.
+ * If the referenced property is missing, a type-appropriate default is used (0, "", false).
+ *
+ * @example
+ * { department: "engineering" }                              // exact match (literal)
+ * { level: { $gte: 5 } }                                    // comparison (literal)
+ * { region: { $in: ["us-east", "eu-west"] } }               // set membership (literal)
+ * { security_level: { $lte: "$principal.access_level" } }   // cross-reference (resolved at token time)
+ */
+/** A single condition value. Resolved and evaluated dynamically by token/content security code. */
+export type PropertyConditionValue = unknown;
+
+export type PropertyConditions = Record<string, PropertyConditionValue>;
 
+/**
+ * Conditions attached to an ACE for dynamic matching.
+ * - `principal_props`: matched against user/group properties at token time (PrincipalSet).
+ * - `resource_props`: matched against content properties at query time (ContentSet).
+ */
+export interface AceConditions {
+    /** Property conditions matched against user/group properties at token time (PrincipalSet). */
+    principal_props?: PropertyConditions;
+    /** Property conditions matched against content properties at query time (ContentSet). */
+    resource_props?: PropertyConditions;
+}
 
 export interface AccessControlEntry {
     role: ProjectRoles;
@@ -74,6 +117,12 @@ export interface AccessControlEntry {
     resource: string; //objectId
     principal_type: AccessControlPrincipalType;
     principal: string; //objectId
+    /** Account scope — required for principal_set/content_set ACEs. */
+    account?: string;
+    /** Project scope — narrows a principal_set/content_set ACE to a single project. */
+    project?: string;
+    /** Dynamic matching conditions for principal_set/content_set ACEs. */
+    conditions?: AceConditions;
     tags?: string[];
     expires_at?: string;
     created_at?: string;
@@ -81,24 +130,44 @@ export interface AccessControlEntry {
     id: string;
 }
 
-export interface ACECreatePayload extends
-    Omit<AccessControlEntry, "created_at" | "updated_at" | "id"> {
-}
+export interface ACECreatePayload extends Omit<AccessControlEntry, 'created_at' | 'updated_at' | 'id'> {}
 
-export interface ACEUpdatePayload extends Partial<ACECreatePayload> {
-}
+export interface ACEUpdatePayload extends Partial<ACECreatePayload> {}
 
 export interface RoleDefinition {
     name: ProjectRoles;
     permissions: Permission[];
 }
 
-export interface AcesQueryOptions {
+// ============================================================================
+// BLP Security Levels
+// ============================================================================
+
+/**
+ * Default sensitivity/clearance levels for the Bell-LaPadula security model.
+ * The numeric value is the index in the array (0 = lowest, 4 = highest).
+ * Projects can override these labels via project settings.
+ */
+export enum SecurityLevel {
+    public = 0,
+    internal = 1,
+    confidential = 2,
+    restricted = 3,
+    secret = 4,
+}
 
-    level?: 'resource' | 'project' | 'projects' | 'account'
-    resource?: string
-    principal?: string
-    role?: string
-    type?: AccessControlResourceType
+/** Human-readable labels for each security level, indexed by numeric value. */
+export const SecurityLevelLabels: readonly string[] = ['Public', 'Internal', 'Confidential', 'Restricted', 'Secret'];
 
+/** Get the label for a security level value. Returns "Unknown" for out-of-range values. */
+export function getSecurityLevelLabel(level: number): string {
+    return SecurityLevelLabels[level] ?? 'Unknown';
+}
+
+export interface AcesQueryOptions {
+    level?: 'resource' | 'project' | 'projects' | 'account';
+    resource?: string;
+    principal?: string;
+    role?: string;
+    type?: AccessControlResourceType;
 }

package/src/agent-request-template.test.ts

@@ -0,0 +1,40 @@
+import { describe, expect, test } from 'vitest';
+import {
+    renderAgentRequestFallback,
+    renderAgentRequestMessage,
+    renderAgentRequestTemplate,
+} from './agent-request-template.js';
+
+describe('agent request template rendering', () => {
+    test('renders top-level, nested, and array placeholders', () => {
+        const result = renderAgentRequestTemplate(
+            'Research {{topic}} for {{customer.name}} using {{sources.0.name}}.',
+            {
+                topic: 'Japan news',
+                customer: { name: 'Acme' },
+                sources: [{ name: 'Reuters' }],
+            },
+        );
+
+        expect(result).toBe('Research Japan news for Acme using Reuters.');
+    });
+
+    test('renders the full JSON payload with json or dot placeholders', () => {
+        const data = { task: 'Summarize earnings', depth: 2 };
+
+        expect(renderAgentRequestTemplate('{{json}}', data)).toBe(JSON.stringify(data, null, 2));
+        expect(renderAgentRequestTemplate('{{.}}', data)).toBe(JSON.stringify(data, null, 2));
+    });
+
+    test('uses stable structured fallback without a template', () => {
+        expect(renderAgentRequestFallback({ task: 'Summarize earnings' })).toBe('{\n  "task": "Summarize earnings"\n}');
+        expect(renderAgentRequestMessage(undefined, 'plain request')).toBe('plain request');
+    });
+
+    test('suppresses configured templates that render empty', () => {
+        const data = { missing: null };
+
+        expect(renderAgentRequestMessage('{{missing}}', data)).toBe('');
+        expect(renderAgentRequestMessage('{{unknown}}', { task: 'hidden' })).toBe('');
+    });
+});

package/src/agent-request-template.ts

@@ -0,0 +1,45 @@
+function isRecordValue(value: unknown): value is Record<string, unknown> {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+
+function getTemplatePathValue(data: unknown, path: string): unknown {
+    if (path === '.' || path === 'json') return data;
+
+    return path.split('.').reduce<unknown>((current, part) => {
+        if (Array.isArray(current) && /^\d+$/.test(part)) return current[Number(part)];
+        if (!isRecordValue(current)) return undefined;
+        return current[part];
+    }, data);
+}
+
+function stringifyTemplateValue(value: unknown): string {
+    if (value === null || value === undefined) return '';
+    if (typeof value === 'string') return value;
+    if (typeof value === 'number' || typeof value === 'boolean') return String(value);
+
+    try {
+        return JSON.stringify(value, null, 2);
+    } catch {
+        return String(value);
+    }
+}
+
+export function renderAgentRequestTemplate(template: string, data: unknown): string {
+    return template.replace(/\{\{\s*([\w.-]+|\.)\s*\}\}/g, (_match, path: string) =>
+        stringifyTemplateValue(getTemplatePathValue(data, path)),
+    );
+}
+
+export function renderAgentRequestFallback(data: unknown): string {
+    if (typeof data === 'string') return data;
+    if (data === null || data === undefined) return '';
+    return stringifyTemplateValue(data);
+}
+
+export function renderAgentRequestMessage(template: string | undefined, data: unknown): string {
+    const trimmedTemplate = template?.trim();
+    if (!trimmedTemplate) return renderAgentRequestFallback(data);
+
+    const rendered = renderAgentRequestTemplate(trimmedTemplate, data).trim();
+    return rendered;
+}

package/src/analytics.ts

@@ -1,4 +1,3 @@
-
 export interface AnalyticsAxis {
     environment?: string;
     project?: string;
@@ -10,12 +9,11 @@ export interface AnalyticsAxis {
 }
 
 export interface RunAnalyticsQuery {
-
     /** filters to apply to the query */
     filterBy: AnalyticsAxis;
 
     /** The field to group by */
-    groupBy?: RunAnalyticsGroupBy
+    groupBy?: RunAnalyticsGroupBy;
 
     /** The start date of the query in EPOCH format */
     from?: number;
@@ -30,25 +28,22 @@ export interface RunAnalyticsQuery {
 
     /** The field to sort by */
     virtual?: boolean;
-
 }
 
+export type RunAnalyticsGroupBy = 'interaction' | 'modelId' | 'project' | 'status' | 'tags' | 'environment';
 
-export type RunAnalyticsGroupBy = "interaction" | "modelId" | "project" | "status" | "tags" | "environment";
-
-export type TimeResolution = "minute" | "hour" | "day" | "week" | "month" | "year";
-
+export type TimeResolution = 'minute' | 'hour' | 'day' | 'week' | 'month' | 'year';
 
 export interface RunAnalyticsResult {
-    date: string,
-    timestamp: string,
-    group: string
-    count: number,
+    date: string;
+    timestamp: string;
+    group: string;
+    count: number;
     execution_time: {
-        avg: number,
-        min: number,
-        max: number
-    },
+        avg: number;
+        min: number;
+        max: number;
+    };
 }
 
 /** Entity with status breakdown */

package/src/apikey.ts

@@ -1,9 +1,21 @@
-import { UserGroupRef } from "./group.js";
-import { ProjectRef, ProjectRoles } from "./project.js";
-import { AccountRef } from "./user.js";
+import type { PropertyConditions } from './access-control.js';
+import type { UserGroupRef } from './group.js';
+import type { ProjectRef, ProjectRoles } from './project.js';
+import type { AccountRef } from './user.js';
+
+/**
+ * Content security conditions in the JWT, keyed by permission type.
+ * Each key maps to an array of condition sets — at query time, any matching set grants access ($or).
+ * Presence of this object in the JWT switches content access from allow-all to restrict mode.
+ */
+export interface ContentSecurity {
+    read?: PropertyConditions[];
+    write?: PropertyConditions[];
+    delete?: PropertyConditions[];
+}
 
 export enum ApiKeyTypes {
-    secret = "sk",
+    secret = 'sk',
 }
 export interface ApiKey {
     id: string;
@@ -24,7 +36,7 @@ export interface ApiKey {
 
 export interface CreateOrUpdateApiKeyPayload extends Partial<ApiKey> {}
 
-export interface ApiKeyWithValue extends Omit<ApiKey, "maskedValue"> {
+export interface ApiKeyWithValue extends ApiKey {
     value: string;
 }
 
@@ -70,6 +82,20 @@ export interface AuthTokenPayload {
      */
     apps: string[];
 
+    /**
+     * Apps in `apps[]` whose UI surface is restricted for this principal — present only on
+     * user tokens, and only when at least one app applies. Such apps grant functional access
+     * (tools, endpoints, contributions) but the portal must hide them from navigation unless
+     * the user holds an explicit app_member ACE.
+     *
+     * UI consumers should treat an app as visible when:
+     *   `apps.includes(name) && !ui_restrictions?.includes(name)`
+     *
+     * Omitted entirely when empty to keep the JWT compact. Not emitted on agent or service
+     * tokens — those carry only the functional `apps[]` set.
+     */
+    ui_restrictions?: string[];
+
     /**
      * The user ID (if any) attached to the token.
      * This is set when the token is a user token or an agent token running as a user.
@@ -80,6 +106,10 @@ export interface AuthTokenPayload {
     /** groups */
     groups?: UserGroupRef[]; //group ids
 
+    /** Content security conditions keyed by permission (read/write/delete).
+     *  Presence triggers restrict mode: project:* is dropped from security filters. */
+    content_security?: ContentSecurity;
+
     /**
      * API endpoints information to be used with this token.
      * Either a n API domain like 'api.vertesia.io' | 'api-preview.vertesia.io' | 'api-staging.vertesia.io' | 'local'
@@ -91,6 +121,7 @@ export interface AuthTokenPayload {
               studio: string;
               store: string;
               token?: string;
+              git?: string;
           };
 
     iss: string; //issuer
@@ -121,10 +152,11 @@ export interface AuthTokenPayload {
 }
 
 export enum PrincipalType {
-    User = "user",
-    Group = "group",
-    ApiKey = "apikey",
-    ServiceAccount = "service_account",
-    Agent = "agent",
-    Schedule = "schedule",
+    User = 'user',
+    OAuthAccess = 'oauth_access',
+    Group = 'group',
+    ApiKey = 'apikey',
+    ServiceAccount = 'service_account',
+    Agent = 'agent',
+    Schedule = 'schedule',
 }