@vertesia/common 1.5.0-dev.20260807.073259Z → 1.5.0-dev.20260901.005903Z

package/src/apps.ts

@@ -19,6 +19,7 @@ import type {
     AppInstallationProjectsQuerySchema,
     AppInstallationProviderBindingSchema,
     AppInstallationsQuerySchema,
+    AppListScopeSchema,
     AppOAuthCollectionParamsSchema,
     AppOAuthProviderParamsSchema,
     AppRepoBranchSchema,
@@ -32,6 +33,7 @@ import type {
     AppScaffoldModuleSchema,
     AppScaffoldProgressSchema,
     AppScaffoldProgressStatusSchema,
+    AppsQuerySchema,
     AppToolCollectionSchema,
     AppVersionGitRefTypeSchema,
     AppVersionGitSourceSchema,
@@ -46,6 +48,7 @@ import type {
     OAuthClientCredentialsSchema,
     StartAppBuildRequestSchema,
     StartAppBuildResponseSchema,
+    StartAppDevelopmentTaskRequestSchema,
     StartAppScaffoldRequestSchema,
     StartAppScaffoldResponseSchema,
     UpdateAppInstallationToolAllowlistPayloadSchema,
@@ -85,6 +88,7 @@ import type {
     CompositeAppThemeOverridesSchema,
     CompositeAppUserMenuOverridesSchema,
     PromoteAppVersionResponseSchema,
+    UpdateAppPayloadSchema,
 } from './api-schemas/app-runtime.js';
 import type {
     AppAccessControlSchema,
@@ -164,12 +168,11 @@ export type AppInstallationProjectsQuery = z.infer<typeof AppInstallationProject
 
 export type AppInstallationsQuery = z.infer<typeof AppInstallationsQuerySchema>;
 
-export type ToolCollectionAuthType = z.infer<typeof ToolCollectionAuthTypeSchema>;
+export type AppListScope = z.infer<typeof AppListScopeSchema>;
 
-/**
- * Tool collection type
- */
-export type ToolCollectionType = 'mcp' | 'vertesia_sdk';
+export type AppsQuery = z.infer<typeof AppsQuerySchema>;
+
+export type ToolCollectionAuthType = z.infer<typeof ToolCollectionAuthTypeSchema>;
 
 export type MCPOAuthConfig = z.infer<typeof MCPOAuthConfigSchema>;
 
@@ -182,25 +185,7 @@ export type VertesiaSDKToolCollectionObject = z.infer<typeof VertesiaSDKToolColl
 
 export type ToolCollectionObject = z.infer<typeof ToolCollectionObjectSchema>;
 
-/**
- * Backward-compatible TypeScript alias. Public API payloads should reference
- * ToolCollectionObject directly so generated clients do not create a wrapper
- * model around the discriminated union.
- */
-export type ToolCollection = ToolCollectionObject;
-
-export const MCP_COLLECTION_ID_PATTERN = /^[a-z0-9]+(?:_[a-z0-9]+)*$/;
-export const MCP_COLLECTION_NAMESPACE_PATTERN = /^[a-z0-9]+(?:_[a-z0-9]+)*$/;
-
-export function isValidMCPCollectionId(id: string): boolean {
-    return MCP_COLLECTION_ID_PATTERN.test(id);
-}
-
-export function isValidMCPCollectionNamespace(namespace: string): boolean {
-    return MCP_COLLECTION_NAMESPACE_PATTERN.test(namespace);
-}
-
-export function deriveMCPCollectionId(input: string): string {
+function deriveMCPCollectionId(input: string): string {
     return input
         .trim()
         .toLowerCase()
@@ -209,10 +194,6 @@ export function deriveMCPCollectionId(input: string): string {
         .replace(/_+/g, '_');
 }
 
-export function getDefaultOAuthAppNameForCollectionId(collectionId: string): string {
-    return collectionId.replace(/_/g, '-');
-}
-
 /**
  * Normalizes a tool collection to the object format.
  * Applies optional `{{var}}` substitution to the URL so manifests can reference
@@ -293,95 +274,6 @@ export type AppCapabilities = z.infer<typeof AppCapabilitiesSchema>;
  * Resolution-time only; never persisted. Set by the generated app template via client.withAppVersion.
  */
 export const APP_VERSION_HEADER = 'x-vertesia-app-version';
-/**
- * The platform-artifact types an app build can be required to create. A finer-grained
- * counterpart to {@link AppCapabilities}: a single `interactions` capability may comprise
- * several `interaction` artifacts plus `agent`, `activity`, and `tool` artifacts that
- * {@link AppCapabilities} folds together. Used by the App Solution Architect manifest and
- * the publish-time capability gate.
- */
-export const APP_ARTIFACT_TYPES = [
-    'interaction',
-    'agent',
-    'type',
-    'process',
-    'view',
-    'template',
-    'dashboard',
-    'activity',
-    'tool',
-    'hook',
-    'subscription',
-] as const;
-
-export type AppArtifactType = (typeof APP_ARTIFACT_TYPES)[number];
-
-/**
- * A single platform artifact the App Solution Architect requires the build to create.
- * `id` is the app-owned in-code id the implementation must register and reference
- * (e.g. `app:<name>:main:extract-item` for interactions/agents, `app:<name>:<type>` for
- * types, `app:<name>:<process>` for processes, and `app:<name>:<local-id>` for hooks/subscriptions).
- */
-/**
- * Build progress for one artifact, maintained by the developer agent as a living checklist:
- *  - `pending` — defined by the architect, not yet built.
- *  - `built`   — registered in the package, not yet successfully exercised.
- *  - `done`    — built AND successfully exercised against real data.
- * This is the agent's self-reported claim for tracking/handoff; the capability gate verifies
- * the truth independently via package registration + run/data telemetry and does not trust it.
- */
-export type AppArtifactStatus = 'pending' | 'built' | 'done';
-
-export const APP_ARTIFACT_STATUSES: readonly AppArtifactStatus[] = ['pending', 'built', 'done'];
-
-export interface AppPlannedArtifact {
-    /** App-owned in-code id the build must register and reference. */
-    id: string;
-    type: AppArtifactType;
-    /** Short human label. */
-    name?: string;
-    /** Why this artifact exists / what it does — carried into the build checklist. */
-    purpose?: string;
-    /**
-     * When false, the artifact is planned but optional: the capability gate warns rather
-     * than blocks if it is missing or never exercised. Defaults to required (true).
-     */
-    required?: boolean;
-    /** Build progress, updated by the developer agent. Defaults to `pending`. */
-    status?: AppArtifactStatus;
-}
-
-/**
- * Structured result the App Solution Architect emits alongside its prose artifacts — the
- * machine-readable contract for the build. The implementation MUST register every required artifact
- * before building a candidate, then successfully exercise it after that candidate is installed and
- * version-pinned. Persisted into the app repo as {@link APP_CAPABILITY_MANIFEST_PATH} so it survives
- * across runs and the package-registration gate can verify it deterministically. If the builder finds the plan
- * wrong or insufficient, the orchestrator relaunches the architect to revise the manifest;
- * the gate always checks against the latest committed copy.
- */
-export interface AppCapabilityManifest {
-    /** Artifact-storage ref to the prose architecture spec (e.g. the architecture `.md`). */
-    spec_artifact: string;
-    /** Platform artifacts the build must create. */
-    artifacts: AppPlannedArtifact[];
-    /**
-     * Monotonic revision, starting at 1, bumped each time the architect evolves the manifest for
-     * the SAME app on a later iteration (read the committed manifest, preserve untouched artifacts,
-     * add/modify/remove, then bump). Lets downstream agents tell which contract they are building to.
-     */
-    revision?: number;
-    /**
-     * Newest-first change notes, one entry per revision (what was added/modified/removed and why).
-     * How manifest changes are communicated to downstream agents across iterations.
-     */
-    changelog?: string[];
-    /** Optional free-form notes the architect wants the builder to honor. */
-    notes?: string;
-}
-
-/** Repo-relative path the capability manifest is committed to, read by version-build gates. */
-export const APP_CAPABILITY_MANIFEST_PATH = 'docs/app-capability-manifest.json';
 export type AppAvailableIn = z.infer<typeof AppAvailableInSchema>;
 
 export type AppVersionKind = z.infer<typeof AppVersionKindSchema>;
@@ -415,27 +307,6 @@ export type StartAppBuildRequest = z.infer<typeof StartAppBuildRequestSchema>;
 
 export type StartAppBuildResponse = z.infer<typeof StartAppBuildResponseSchema>;
 
-export interface AppBuildWorkflowInput extends StartAppBuildRequest {
-    app_id: string;
-    app_record_id?: string;
-    /** Rebuild this persisted version record at its original commit and target. */
-    rebuild_version_record_id?: string;
-    app_title?: string;
-    app_description?: string;
-    source_git_url?: string;
-}
-
-export interface AppBuildWorkflowResult {
-    app_id: string;
-    version_id: string;
-    kind: Extract<AppVersionKind, 'version'>;
-    state: AppVersionState;
-    source_commit: string;
-    source_git?: AppVersionGitSource;
-    urls?: AppVersionUrls;
-    file_count?: number;
-}
-
 export type AppBuildProgressStatus = z.infer<typeof AppBuildProgressStatusSchema>;
 
 export type AppBuildProgress = z.infer<typeof AppBuildProgressSchema>;
@@ -446,17 +317,7 @@ export type StartAppScaffoldRequest = z.infer<typeof StartAppScaffoldRequestSche
 
 export type StartAppScaffoldResponse = z.infer<typeof StartAppScaffoldResponseSchema>;
 
-export interface AppScaffoldWorkflowInput extends StartAppScaffoldRequest {}
-
-export interface AppScaffoldWorkflowResult {
-    app_id: string;
-    app_record_id?: string;
-    installation_id?: string;
-    git_url?: string;
-    source_git?: AppVersionGitSource;
-    files?: number;
-    initial_version_build?: StartAppBuildResponse;
-}
+export type StartAppDevelopmentTaskRequest = z.infer<typeof StartAppDevelopmentTaskRequestSchema>;
 
 export type AppScaffoldProgressStatus = z.infer<typeof AppScaffoldProgressStatusSchema>;
 
@@ -476,22 +337,6 @@ export type AppScaffoldProgress = z.infer<typeof AppScaffoldProgressSchema>;
  */
 export type AppAccessControl = z.infer<typeof AppAccessControlSchema>;
 
-/**
- * Resolve the effective access_control policy for an installed app:
- * installation override wins, then manifest default, then `'all'`.
- *
- * Shared by the STS (JWT generation), the studio-server (validation), and the UI (badge display)
- * so the resolution rule lives in exactly one place. Named `effectiveAppAccessControl` (not just
- * `effectiveAccessControl`) because exports from `@vertesia/common` are flattened — the broader
- * name would risk colliding with other access-control families added later.
- */
-export function effectiveAppAccessControl(
-    installation: { access_control?: AppAccessControl } | null | undefined,
-    manifest: { access_control?: AppAccessControl } | null | undefined,
-): AppAccessControl {
-    return installation?.access_control ?? manifest?.access_control ?? 'all';
-}
-
 // QUARANTINED from the tenth batch, and the blocker is not in this file. A `//` comment rather than
 // TSDoc on purpose: this component is still DERIVED, so a doc comment here would be published as its
 // OpenAPI description.
@@ -506,6 +351,7 @@ export function effectiveAppAccessControl(
 //
 // Everything this interface REFERENCES converted: the fields below now carry canonical components.
 export type AppManifestData = z.infer<typeof AppManifestDataSchema>;
+export type UpdateAppPayload = z.infer<typeof UpdateAppPayloadSchema>;
 
 export type AppGitSourceConfig = z.infer<typeof AppGitSourceConfigSchema>;
 
@@ -561,12 +407,6 @@ export type AppRepoTreeEntry = z.infer<typeof AppRepoTreeEntrySchema>;
 /** A non-recursive listing of an app git repo directory at a given ref. */
 export type AppRepoTree = z.infer<typeof AppRepoTreeSchema>;
 
-/** Browser-side limits mirrored by the app Git service document endpoint. */
-export const APP_REPO_DOCUMENT_UPLOAD_MAX_FILE_BYTES = 20 * 1024 * 1024;
-export const APP_REPO_DOCUMENT_UPLOAD_MAX_TOTAL_BYTES = 80 * 1024 * 1024;
-export const APP_REPO_DOCUMENT_UPLOAD_MAX_FILES = 20;
-export const APP_REPO_DOCUMENT_UPLOAD_PREFIX = 'docs/';
-
 /** Result of committing one or more uploaded documents to an app repository. */
 export type AppRepoDocumentCommit = z.infer<typeof AppRepoDocumentCommitSchema>;
 
@@ -677,12 +517,13 @@ export type AppInstallation = z.infer<typeof AppInstallationSchema>;
 
 export type AppInstallationWithManifest = z.infer<typeof AppInstallationWithManifestSchema>;
 
-export type AppInstallationListEntry = z.infer<typeof AppInstallationListEntrySchema>;
-
+/** An installation whose app manifest could not be resolved (the app was deleted or is unpublished). */
 export interface OrphanedAppInstallation extends Omit<AppInstallation, 'manifest'> {
     manifest: null;
 }
 
+export type AppInstallationListEntry = z.infer<typeof AppInstallationListEntrySchema>;
+
 export type OAuthClientCredentials = z.infer<typeof OAuthClientCredentialsSchema>;
 
 export type AppOAuthCollectionParams = z.infer<typeof AppOAuthCollectionParamsSchema>;
@@ -721,11 +562,6 @@ export type OAuthAuthStatus = z.infer<typeof OAuthAuthStatusSchema>;
  */
 export type OAuthAuthorizeResponse = z.infer<typeof OAuthAuthorizeResponseSchema>;
 
-export interface McpOAuthCollectionRef {
-    app_install_id: string;
-    collection_id: string;
-}
-
 /**
  * Payload for storing the static bearer token of an `auth: 'api_key'` MCP collection.
  * The key is write-only — it is never echoed back by any endpoint.
@@ -881,9 +717,6 @@ export type CompositeAppHeaderItemKind = z.infer<typeof CompositeAppHeaderItemKi
 /** Where a header link opens. */
 export type CompositeAppHeaderItemTarget = z.infer<typeof CompositeAppHeaderItemTargetSchema>;
 
-/** Stable identifiers for the built-in header items. */
-export const COMPOSITE_APP_HEADER_BUILTIN_IDS = ['app_portal', 'docs', 'help', 'user_menu'] as const;
-
 /**
  * A single button in the CompositeApp header bar.
  *

package/src/ask-user.ts

@@ -25,7 +25,7 @@ export interface McpConnectUxConfig {
 }
 
 /** Optional free-form response rendered alongside predefined options. */
-export interface AskUserFreeResponseConfig {
+interface AskUserFreeResponseConfig {
     /** Placeholder text for the input. */
     placeholder?: string;
     /** Label for the submit button. */

package/src/audit-trail.ts

@@ -46,9 +46,6 @@ export const AUDIT_ACTIONS = [
 export type KnownAuditAction = (typeof AUDIT_ACTIONS)[number];
 export type AuditAction = KnownAuditAction | (string & {});
 
-/** Billable audit actions for cost analytics queries */
-export const BILLABLE_AUDIT_ACTIONS = ['inference', 'embedding', 'image_generation'] satisfies KnownAuditAction[];
-
 /**
  * Generic metering entry attached to audit events.
  * Used for cost attribution, usage tracking, and billing.
@@ -104,3 +101,6 @@ export type AuditAggregationQuery = z.infer<typeof AuditAggregationQuerySchema>;
 export type AuditAggregationRow = z.infer<typeof AuditAggregationRowSchema>;
 
 export type AuditAggregationResponse = z.infer<typeof AuditAggregationResponseSchema>;
+
+/** Billable audit actions for cost analytics queries */
+export const BILLABLE_AUDIT_ACTIONS = ['inference', 'embedding', 'image_generation'] satisfies KnownAuditAction[];

package/src/browser-credentials.ts

@@ -4,6 +4,7 @@ import type {
     WebsiteCredentialFillRequestSchema,
     WebsiteCredentialFillResponseSchema,
     WebsiteCredentialMetadataSchema,
+    WebsiteCredentialMetadataUpdateSchema,
     WebsiteCredentialRecordSchema,
     WebsiteCredentialSecretInputSchema,
     WebsiteCredentialTotpAlgorithmSchema,
@@ -36,13 +37,8 @@ export interface UpdateWebsiteCredentialRequest extends Partial<WebsiteCredentia
     clear_oauth?: boolean;
 }
 
-export interface WebsiteCredentialFillTarget {
-    username_target_id?: string;
-    password_target_id?: string;
-    totp_target_id?: string;
-    submit_target_id?: string;
-}
-
 export type WebsiteCredentialFillRequest = z.infer<typeof WebsiteCredentialFillRequestSchema>;
 
 export type WebsiteCredentialFillResponse = z.infer<typeof WebsiteCredentialFillResponseSchema>;
+
+export type WebsiteCredentialMetadataUpdate = z.infer<typeof WebsiteCredentialMetadataUpdateSchema>;

package/src/common.ts

@@ -8,7 +8,13 @@ import type {
     BulkOperationResponseSchema,
     BulkOperationResultSchema,
 } from './api-schemas/bulk-operation.js';
-import type { DeleteCountResultSchema, GenericCommandResponseSchema } from './api-schemas/commands.js';
+import type {
+    DeleteCountResultSchema,
+    GenericCommandResponseSchema,
+    MigrationListResponseSchema,
+    RunMigrationPayloadSchema,
+    RunMigrationResponseSchema,
+} from './api-schemas/commands.js';
 import type { FindPayloadSchema } from './api-schemas/content.js';
 import type { SuccessResponseSchema } from './api-schemas/oauth.js';
 import type { CountResultSchema } from './api-schemas/project.js';
@@ -81,3 +87,9 @@ export interface BulkObjectUpdateOptions {
 }
 
 export type BulkOperationResponse = z.infer<typeof BulkOperationResponseSchema>;
+
+export type RunMigrationPayload = z.infer<typeof RunMigrationPayloadSchema>;
+
+export type RunMigrationResponse = z.infer<typeof RunMigrationResponseSchema>;
+
+export type MigrationListResponse = z.infer<typeof MigrationListResponseSchema>;

package/src/content-query.ts

@@ -0,0 +1,5 @@
+import type { z } from 'zod';
+import type { ContentQueryPayloadSchema, ContentQueryResultSchema } from './api-schemas/content-query.js';
+
+export type ContentQueryPayload = z.infer<typeof ContentQueryPayloadSchema>;
+export type ContentQueryResult = z.infer<typeof ContentQueryResultSchema>;

package/src/data-platform.ts

@@ -45,6 +45,7 @@ import type {
     DataColumnForAISchema,
     DataColumnSchema,
     DataColumnTypeSchema,
+    DataColumnUpdateSchema,
     DataForeignKeyForAISchema,
     DataForeignKeySchema,
     DataIndexSchema,
@@ -424,7 +425,7 @@ export type DataSchemaForAI = z.infer<typeof DataSchemaForAISchema>;
 /**
  * Version retention configuration.
  */
-export interface DataStoreRetentionConfig {
+interface DataStoreRetentionConfig {
     /** Keep versions for this many days */
     retention_days: number;
     /** Named snapshots are exempt from retention */
@@ -498,15 +499,6 @@ export const DEFAULT_DASHBOARD_LAYOUT: DashboardLayout = {
     padding: 20,
 };
 
-/**
- * SQL query parameters with default values.
- * Supports {{param_name}} placeholders in SQL that get substituted at runtime.
- */
-export interface DashboardQueryParameters {
-    /** Default values for SQL parameters. Keys are parameter names (without braces). */
-    defaults: Record<string, string>;
-}
-
 /**
  * Elasticsearch DSL supported by dashboard data sources.
  * Queries execute through Vertesia Store, so project/security filtering remains server-side.
@@ -574,31 +566,6 @@ export type CreateDashboardPayload = z.infer<typeof CreateDashboardPayloadSchema
  */
 export type UpdateDashboardPayload = z.infer<typeof UpdateDashboardPayloadSchema>;
 
-/**
- * Payload for previewing a dashboard (render without saving).
- */
-export interface PreviewDashboardPayload {
-    // ============= New architecture (v2) =============
-    /** Data source used to populate Vega `data.values`. */
-    dataSource?: DashboardDataSource;
-    /** SQL query that returns all data for the dashboard */
-    query?: string;
-    /** Maximum rows to return from the query (default: 10000) */
-    queryLimit?: number;
-    /** Default values for SQL parameters */
-    queryParameters?: Record<string, string>;
-    /** Complete Vega-Lite specification for the entire dashboard */
-    spec?: Record<string, unknown>;
-
-    // ============= Legacy architecture (v1, deprecated) =============
-    /** @deprecated Use single `query` field instead */
-    queries?: DashboardQuery[];
-    /** @deprecated Use single `spec` field with vconcat/hconcat instead */
-    panels?: DashboardPanel[];
-    /** @deprecated Layout is now handled within the Vega-Lite spec */
-    layout?: Partial<DashboardLayout>;
-}
-
 /**
  * Options for rendering a dashboard.
  */
@@ -611,22 +578,6 @@ export interface RenderDashboardOptions {
     backgroundColor?: string;
 }
 
-/**
- * Result of rendering a dashboard.
- */
-export interface RenderDashboardResult {
-    /** URL to the rendered PNG image */
-    url: string;
-    /** When the URL expires (seconds from now) */
-    expires_in: number;
-    /** When the dashboard was rendered */
-    rendered_at: string;
-    /** Image width in pixels */
-    width: number;
-    /** Image height in pixels */
-    height: number;
-}
-
 // ============================================================================
 // Dashboard Version Types
 // ============================================================================
@@ -651,3 +602,5 @@ export type CreateDashboardSnapshotPayload = z.infer<typeof CreateDashboardSnaps
  * Payload for promoting a version to current.
  */
 export type PromoteDashboardVersionPayload = z.infer<typeof PromoteDashboardVersionPayloadSchema>;
+
+export type DataColumnUpdate = z.infer<typeof DataColumnUpdateSchema>;

package/src/email.ts

@@ -1,4 +1,17 @@
 import type { z } from 'zod';
+import type {
+    CreateEmailRouteRequestSchema,
+    CreateEmailRouteResponseSchema,
+    EmailRouteDataSchema,
+    EmailRouteResponseSchema,
+    ForwardEmailRequestSchema,
+    ForwardEmailResponseSchema,
+    ResolveEmailRouteRequestSchema,
+    SendEmailRequestSchema,
+    SendEmailResponseSchema,
+    UpdateEmailRouteRequestSchema,
+    UpdateEmailRouteResponseSchema,
+} from './api-schemas/agent-communication.js';
 import type { EmailChannelSchema, InteractiveChannelSchema, UserChannelSchema } from './api-schemas/interaction.js';
 /**
  * Email-related types for agent communication and routing.
@@ -51,21 +64,14 @@ export function isInteractiveChannel(channel: UserChannel): channel is Interacti
  *
  * Pattern: r+{routeKey}@{domain} instead of r+{32-char-uuid}@{domain}
  */
-export interface EmailRouteData {
-    /** The workflow run ID */
-    runId: string;
-    /** Account ID for quick project lookup */
-    accountId: string;
-    /** Project ID for quick config lookup */
-    projectId: string;
-    /** Email thread subject (without "Re:" prefix) */
-    threadSubject?: string;
-    /** Message ID for In-Reply-To header (last message in thread) */
-    inReplyTo?: string;
-    /** Chain of message IDs for References header */
-    references?: string[];
-    /** User's email address (recipient of agent emails, sender of replies) */
-    userEmail: string;
-    /** Inbound domain for filtering (e.g., inbound.vertesia.io) */
-    inboundDomain: string;
-}
+export type EmailRouteData = z.infer<typeof EmailRouteDataSchema>;
+export type SendEmailRequest = z.infer<typeof SendEmailRequestSchema>;
+export type SendEmailResponse = z.infer<typeof SendEmailResponseSchema>;
+export type ResolveEmailRouteRequest = z.infer<typeof ResolveEmailRouteRequestSchema>;
+export type CreateEmailRouteRequest = z.infer<typeof CreateEmailRouteRequestSchema>;
+export type CreateEmailRouteResponse = z.infer<typeof CreateEmailRouteResponseSchema>;
+export type EmailRouteResponse = z.infer<typeof EmailRouteResponseSchema>;
+export type UpdateEmailRouteRequest = z.infer<typeof UpdateEmailRouteRequestSchema>;
+export type UpdateEmailRouteResponse = z.infer<typeof UpdateEmailRouteResponseSchema>;
+export type ForwardEmailRequest = z.infer<typeof ForwardEmailRequestSchema>;
+export type ForwardEmailResponse = z.infer<typeof ForwardEmailResponseSchema>;

package/src/environment.ts

@@ -40,7 +40,7 @@ export interface SupportedProviderParams extends Omit<ProviderParams, 'id'> {
     id: SupportedProviders;
 }
 
-export const CustomProvidersList: Record<CustomProviders, SupportedProviderParams> = {
+const CustomProvidersList: Record<CustomProviders, SupportedProviderParams> = {
     virtual_lb: {
         id: CustomProviders.virtual_lb,
         name: 'Virtual - Load Balancer',
@@ -93,19 +93,6 @@ export type { TextFallbackOptions } from '@llumiverse/common';
 
 export type ExecutionEnvironmentSettings = z.infer<typeof ExecutionEnvironmentSettingsSchema>;
 
-/**
- * Returns the configured Vertex AI bucket access principal for an environment, or undefined.
- * Only Vertex AI environments expose this setting; the value is trimmed and empty strings
- * are treated as unset so callers get a single, normalized representation.
- */
-export function getVertexBucketAccessPrincipal(
-    env: { provider?: SupportedProviders; settings?: ExecutionEnvironmentSettings } | undefined,
-): string | undefined {
-    if (!env || env.provider !== SupportedProviders.vertexai) return undefined;
-    const principal = env.settings?.bucket_access_principal;
-    return typeof principal === 'string' && principal.trim().length > 0 ? principal.trim() : undefined;
-}
-
 export type ExecutionEnvironment = z.infer<typeof ExecutionEnvironmentSchema>;
 
 export type ExecutionEnvironmentRef = z.infer<typeof ExecutionEnvironmentRefSchema>;

package/src/facets.ts

@@ -21,8 +21,6 @@ export interface DateFacet<T extends Date | string = string> {
     default?: string;
 }
 
-export type Facet<DateT extends Date | string = string> = StringFacet | NumericFacet | DateFacet<DateT>;
-
 export type FacetSpec = z.infer<typeof FacetSpecSchema>;
 
 export interface FacetBucket {
@@ -36,10 +34,6 @@ export interface FacetNameBucket {
     count: number;
 }
 
-export interface FacetResult {
-    buckets: FacetBucket[];
-}
-
 export interface ComputedFacetBucket {
     _id: string;
     count: number;

package/src/group.ts

@@ -1,11 +1,11 @@
 import type { z } from 'zod';
 import type {
     CreateUserGroupPayloadSchema,
+    ListUserGroupsQuerySchema,
     UpdateUserGroupPayloadSchema,
     UserGroupRefSchema,
     UserGroupSchema,
 } from './api-schemas/group.js';
-import type { UserRef } from './user.js';
 
 /**
  * The user group and its payloads as they cross the wire.
@@ -21,17 +21,7 @@ import type { UserRef } from './user.js';
 export type UserGroup = z.infer<typeof UserGroupSchema>;
 export type CreateUserGroupPayload = z.infer<typeof CreateUserGroupPayloadSchema>;
 export type UpdateUserGroupPayload = z.infer<typeof UpdateUserGroupPayloadSchema>;
-
-/**
- * A group with its members resolved.
- *
- * Not a published component, and deliberately not one: `members` is `select: false` on the model, no
- * endpoint documents it on `UserGroup`, and the members listing publishes `UserRef[]` on its own
- * route instead.
- */
-export interface PopulatesUserGroup extends UserGroup {
-    members: UserRef[];
-}
+export type ListUserGroupsQuery = z.infer<typeof ListUserGroupsQuerySchema>;
 
 /**
  * The group as it appears in a token payload, read by the servers' authorization layer, the clients

package/src/index.ts

@@ -1,5 +1,5 @@
+export type { VertexAIGeminiOmniVideoOptions, VideoResult } from '@llumiverse/common';
 export * from './access-control.js';
-export * from './agent-request-template.js';
 export * from './analytics.js';
 /**
  * Schema-derived API types. MUST stay `export type` — tsc erases it, so `lib/index.js` never
@@ -17,15 +17,15 @@ export * from './apps.js';
 export * from './ask-user.js';
 export * from './audit-trail.js';
 export * from './browser-credentials.js';
-export * from './channels.js';
 export * from './common.js';
+export * from './content-query.js';
 export * from './cost-analytics.js';
 export * from './data-platform.js';
+export * from './email.js';
 export * from './embeddings.js';
 export * from './environment.js';
 export * from './facets.js';
 export * from './group.js';
-export * from './host-utils.js';
 export * from './integrations.js';
 export * from './interaction.js';
 export * from './json.js';
@@ -35,11 +35,9 @@ export * from './model_utility.js';
 export * from './oauth.js';
 export * from './oauth-scopes.js';
 export * from './oauth-server.js';
-export * from './Progress.js';
 export * from './payload.js';
 export * from './pending-asks.js';
 export * from './platform-event.js';
-export * from './platform-event-validation.js';
 export * from './principal-context.js';
 export * from './project.js';
 export * from './prompt.js';
@@ -87,15 +85,5 @@ export * from './utils/auth.js';
 export * from './utils/schemas.js';
 export type * from './utils/type-helpers.js';
 export * from './versions.js';
-export * from './view-configuration-validation.js';
-export * from './view-query-validation.js';
-export * from './view-validation-helpers.js';
 export * from './views.js';
-export * from './views-schema.js';
-export {
-    type AppViewExperienceId,
-    parseAppViewExperienceId,
-    type ViewValidationIssue,
-    validateViewExperienceId,
-} from './views-validation.js';
 export * from './workflow-analytics.js';