@vertesia/common 1.6.0-dev.20261004.085740Z → 1.6.0-dev.20261009.095813Z

package/src/api-schemas/secrets.ts

@@ -1,89 +1,5 @@
 // Runtime schemas for the secrets API domain.
 import { z } from 'zod';
-import { EventCategorySchema } from './audit-trail.js';
-
-export const EventWebhookSigningSecretRequestSchema = z
-    .strictObject({
-        account_id: z.string().optional(),
-        project_id: z.string(),
-    })
-    .meta({ id: 'EventWebhookSigningSecretRequest' });
-
-export const EventWebhookSigningSecretResponseSchema = z
-    .strictObject({
-        subscription_id: z.string(),
-        secret: z.string(),
-        secret_label: z.string(),
-    })
-    .meta({ id: 'EventWebhookSigningSecretResponse' });
-
-export const SignEventWebhookRequestSchema = EventWebhookSigningSecretRequestSchema.extend({
-    delivery_id: z.string(),
-    body: z.string(),
-    event_id: z.string(),
-    event_category: EventCategorySchema,
-    action: z.string(),
-    timestamp: z.number().optional(),
-}).meta({ id: 'SignEventWebhookRequest' });
-
-export const SignEventWebhookResponseSchema = z
-    .strictObject({
-        headers: z.record(z.string(), z.string()),
-        timestamp: z.number(),
-        signature: z.string(),
-    })
-    .meta({ id: 'SignEventWebhookResponse' });
-
-export const EventIngestSigningSecretRequestSchema = z
-    .strictObject({
-        account_id: z.string().optional(),
-        project_id: z.string(),
-    })
-    .meta({ id: 'EventIngestSigningSecretRequest' });
-
-export const EventIngestSigningSecretResponseSchema = z
-    .strictObject({
-        channel_id: z.string(),
-        secret: z.string(),
-        secret_label: z.string(),
-    })
-    .meta({ id: 'EventIngestSigningSecretResponse' });
-
-export const VerifyEventIngestSignatureRequestSchema = EventIngestSigningSecretRequestSchema.extend({
-    body: z.string(),
-    signature_header: z.string(),
-    algorithm: z.enum(['sha256', 'sha1']).optional(),
-    encoding: z.enum(['hex', 'base64']).optional(),
-    prefix: z.string().optional(),
-}).meta({ id: 'VerifyEventIngestSignatureRequest' });
-
-export const VerifyEventIngestSignatureResponseSchema = z
-    .strictObject({
-        valid: z.boolean(),
-    })
-    .meta({ id: 'VerifyEventIngestSignatureResponse' });
-
-export const GithubInstallationTokenRequestSchema = z
-    .strictObject({
-        account_id: z.string().optional(),
-        project_id: z.string(),
-        installation_id: z.string(),
-        repo: z.string(),
-    })
-    .meta({ id: 'GithubInstallationTokenRequest' });
-
-export const GithubInstallationTokenResponseSchema = z
-    .strictObject({
-        token: z.string(),
-        expires_at: z.string().optional(),
-    })
-    .meta({ id: 'GithubInstallationTokenResponse' });
-
-export const InternalSecretDeleteResponseSchema = z
-    .strictObject({
-        deleted: z.literal(true),
-    })
-    .meta({ id: 'InternalSecretDeleteResponse' });
 
 export const WebsiteCredentialTotpAlgorithmSchema = z
     .enum(['SHA1', 'SHA256', 'SHA512'])

package/src/audit-trail.ts

@@ -15,6 +15,9 @@ export const AUDIT_ACTIONS = [
     'credentials_totp_generation',
     'publish',
     'unpublish',
+    // Content access (retrieval is not proof of a human reading the document)
+    'search',
+    'read',
     // Billable operations
     'inference',
     'embedding',
@@ -56,6 +59,7 @@ export const AUDIT_AGGREGATION_DIMENSIONS = [
     'project_id',
     'principal_id',
     'actor_id',
+    'user_id',
     'details.pipeline',
     'details.verdict',
     'details.workflow_type',
@@ -87,5 +91,18 @@ export type AuditAggregationRow = Wire.AuditAggregationRow;
 
 export type AuditAggregationResponse = Wire.AuditAggregationResponse;
 
+export type AuditAdoptionFilter = Wire.AuditAdoptionFilter;
+export type AuditAdoptionQuery = Wire.AuditAdoptionQuery;
+export type AuditAdoptionPeriod = Wire.AuditAdoptionPeriod;
+export type AuditAdoptionBucket = Wire.AuditAdoptionBucket;
+export type AuditAdoptionActiveDays = Wire.AuditAdoptionActiveDays;
+export type AuditAdoptionProject = Wire.AuditAdoptionProject;
+export type AuditAdoptionHistory = Wire.AuditAdoptionHistory;
+export type AuditAdoptionResponse = Wire.AuditAdoptionResponse;
+export type AuditUsageQuery = Wire.AuditUsageQuery;
+export type AuditUsageCounts = Wire.AuditUsageCounts;
+export type AuditUsageBucket = Wire.AuditUsageBucket;
+export type AuditUsageResponse = Wire.AuditUsageResponse;
+
 /** Billable audit actions for cost analytics queries */
 export const BILLABLE_AUDIT_ACTIONS = ['inference', 'embedding', 'image_generation'] satisfies KnownAuditAction[];

package/src/index.ts

@@ -79,12 +79,8 @@ export * from './rate-limiter.js';
 export * from './refs.js';
 export * from './roles/types.js';
 export type {
-    ReadRunBudgetUsagePayload,
     RunBudgetCapability,
     RunBudgetCapabilityQuery,
-    RunBudgetOwner,
-    RunBudgetTotals,
-    RunBudgetUsage,
 } from './run-budget.js';
 export * from './runs.js';
 export * from './schema-for-extraction.js';

package/src/platform-event.ts

@@ -242,31 +242,6 @@ export interface ListEventSubscriptionsQuery {
     app_installation_id?: string;
 }
 
-/** Trusted Studio -> Zeno request used to provision subscriptions declared by an installed app. */
-export interface ProvisionAppEventSubscriptionsRequest {
-    account_id: string;
-    project_id: string;
-    subscriptions: Array<
-        CreateEventSubscriptionPayload & {
-            target: AppEventDeliveryTargetInput;
-            app_installation_id: string;
-            app_id: string;
-            app_subscription_id: string;
-        }
-    >;
-}
-
-/** Trusted Studio -> Zeno request used to remove every subscription owned by an app installation. */
-export interface RemoveAppEventSubscriptionsRequest {
-    account_id: string;
-    project_id: string;
-    app_installation_id: string;
-}
-
-export interface AppEventSubscriptionsMutationResponse {
-    subscription_ids: string[];
-}
-
 export type EventIngestChannelSortField = 'name' | 'source' | 'enabled' | 'updated_at';
 
 export interface ListEventIngestChannelsQuery {

package/src/run-budget.ts

@@ -1,8 +1,4 @@
 import type * as Wire from './wire-types.generated.js';
 
-export type RunBudgetOwner = Wire.RunBudgetOwner;
-export type RunBudgetUsage = Wire.RunBudgetUsage;
-export type ReadRunBudgetUsagePayload = Wire.ReadRunBudgetUsagePayload;
-export type RunBudgetTotals = Wire.RunBudgetTotals;
 export type RunBudgetCapability = Wire.RunBudgetCapability;
 export type RunBudgetCapabilityQuery = Wire.RunBudgetCapabilityQuery;

package/src/secrets.ts

@@ -18,15 +18,4 @@ export type CreateSecretRequest = Wire.CreateSecretRequest;
 
 export type UpdateSecretRequest = Wire.UpdateSecretRequest;
 
-export type EventWebhookSigningSecretRequest = Wire.EventWebhookSigningSecretRequest;
-export type EventWebhookSigningSecretResponse = Wire.EventWebhookSigningSecretResponse;
-export type SignEventWebhookRequest = Wire.SignEventWebhookRequest;
-export type SignEventWebhookResponse = Wire.SignEventWebhookResponse;
-export type EventIngestSigningSecretRequest = Wire.EventIngestSigningSecretRequest;
-export type EventIngestSigningSecretResponse = Wire.EventIngestSigningSecretResponse;
-export type VerifyEventIngestSignatureRequest = Wire.VerifyEventIngestSignatureRequest;
-export type VerifyEventIngestSignatureResponse = Wire.VerifyEventIngestSignatureResponse;
-export type GithubInstallationTokenRequest = Wire.GithubInstallationTokenRequest;
-export type GithubInstallationTokenResponse = Wire.GithubInstallationTokenResponse;
-
 export type DeleteSecretResponse = Wire.DeleteSecretResponse;

package/src/user.ts

@@ -87,5 +87,3 @@ export type SignupData = Wire.SignupData;
  * The `POST /auth/signup` request body.
  */
 export type SignupPayload = Wire.SignupPayload;
-
-export type AccountApiVersionPolicy = Wire.AccountApiVersionPolicy;

package/src/wire-types.generated.ts

@@ -65,7 +65,6 @@ import type {
 } from './store/store.js';
 import type { AgentMessageType, FileProcessingStatus, WorkflowExecutionStatusValues } from './store/workflow.js';
 import type { TransientTokenType } from './transient-tokens-values.js';
-import type { ApiVersions } from './versions.js';
 import type { ViewNavigationNode } from './views.js';
 import type { AgentEvent, LlmCallType } from './workflow-analytics.js';
 
@@ -1701,7 +1700,7 @@ export type AuditTrailResponse = {
 export type AuditAggregationResolution = 'hour' | 'day' | 'week' | 'month';
 export type AuditAggregationDetailField = 'pipeline' | 'verdict' | 'workflow_type' | 'rule_id';
 export type AuditAggregationOperation = 'count' | 'count_distinct' | 'sum_meter' | 'average_meter';
-export type AuditAggregationDistinctField = 'resource_id' | 'request_id' | 'principal_id' | 'actor_id';
+export type AuditAggregationDistinctField = 'resource_id' | 'request_id' | 'principal_id' | 'actor_id' | 'user_id';
 export type AuditAggregationGroup = {
     dimension: AuditAggregationDimensionWire;
     resolution?: AuditAggregationResolution | undefined;
@@ -1748,6 +1747,90 @@ export type AuditAggregationResponse = {
     from: string;
     to: string;
 };
+export type AuditAdoptionFilter = {
+    actions?: AuditActionWire[] | undefined;
+    resourceTypes?: string[] | undefined;
+    eventCategories?: EventCategory[] | undefined;
+};
+export type AuditAdoptionQuery = {
+    projectId?: string | undefined;
+    from?: string | undefined;
+    to?: string | undefined;
+    filter?: AuditAdoptionFilter | undefined;
+};
+export type AuditAdoptionPeriod = {
+    from: string;
+    to: string;
+};
+export type AuditAdoptionBucket = {
+    from: string;
+    to: string;
+    partial: boolean;
+    active_users: number;
+};
+export type AuditAdoptionActiveDays = {
+    days: number;
+    users: number;
+};
+export type AuditAdoptionProject = {
+    project_id: string;
+    project_name: string | null;
+    active_users: number;
+    active_user_days: number;
+};
+export type AuditAdoptionHistory = {
+    earliest_observed_at: string | null;
+    coverage_from: string | null;
+    completeness: 'unknown' | 'insufficient' | 'verified';
+    retention_unavailable_reason: 'no_previous_users' | 'insufficient_history' | null;
+};
+export type AuditAdoptionResponse = {
+    period: AuditAdoptionPeriod;
+    previous_period: AuditAdoptionPeriod;
+    resolution: 'day' | 'week';
+    active_users: number;
+    previous_active_users: number;
+    retained_users: number;
+    observed_retention: number | null;
+    returning_user_share: number | null;
+    repeat_user_share: number | null;
+    median_active_days: number | null;
+    active_projects: number | null;
+    timeline: AuditAdoptionBucket[];
+    active_day_distribution: AuditAdoptionActiveDays[];
+    top_projects: AuditAdoptionProject[];
+    history: AuditAdoptionHistory;
+};
+export type AuditUsageQuery = {
+    projectId?: string | undefined;
+    from?: string | undefined;
+    to?: string | undefined;
+    resolution?: 'day' | 'week' | 'month' | undefined;
+};
+export type AuditUsageCounts = {
+    active_users: number;
+    agent_runs: number;
+    user_agent_runs: number;
+    automated_agent_runs: number;
+    agent_users: number;
+    direct_calls: number;
+    direct_call_users: number;
+    content_objects: number;
+    user_content_objects: number;
+    other_content_objects: number;
+};
+export type AuditUsageBucket = {
+    from: string;
+    to: string;
+    partial: boolean;
+    counts: AuditUsageCounts;
+};
+export type AuditUsageResponse = {
+    period: AuditAdoptionPeriod;
+    resolution: 'day' | 'week' | 'month';
+    totals: AuditUsageCounts;
+    timeline: AuditUsageBucket[];
+};
 export type WebsiteCredentialCapability = 'password' | 'totp' | 'oauth';
 export type WebsiteCredentialTotpAlgorithm = 'SHA1' | 'SHA256' | 'SHA512';
 export type WebsiteCredentialWebsite = {
@@ -2041,6 +2124,7 @@ export type CostAnalyticsQuery = {
     workflow_run_id?: string | undefined;
     run_id?: string | undefined;
     agent_run_id?: string | undefined;
+    agent_only?: boolean | undefined;
     interaction_id?: string | undefined;
     principal_id?: string | undefined;
     account_id?: string | undefined;
@@ -3430,6 +3514,7 @@ export type UserGroup = {
     clearance?: number | undefined;
     compartments?: string[] | undefined;
     allowed_projects?: string[] | undefined;
+    member_count?: number | undefined;
 };
 export type CreateUserGroupPayload = {
     name: string;
@@ -6111,30 +6196,6 @@ export type RoleDefinition = RoleDefinitionFromSchema;
  * by the server's `/roles/system` endpoint.
  */
 export type SystemRoleDefinition = SystemRoleDefinitionFromSchema;
-export type RunBudgetOwner = {
-    workflow_id: string;
-    first_run_id: string;
-};
-export type RunBudgetUsage = {
-    input: number;
-    cached_input: number;
-    output: number;
-};
-export type ReadRunBudgetUsagePayload = {
-    account_id: string;
-    project_id: string;
-    agent_run_id: string;
-    owner: RunBudgetOwner;
-    require_estimates?: boolean | undefined;
-};
-export type RunBudgetTotals = {
-    measured: RunBudgetUsage;
-    unpriced: RunBudgetUsage;
-    reported_nano_usd: number;
-    estimated_nano_usd: number;
-    unmeasured_calls: number;
-    missing_usage_calls: number;
-};
 export type RunBudgetCapability = {
     supported: boolean;
     source: 'provider' | 'estimate' | 'unavailable';
@@ -6390,61 +6451,6 @@ export type UpdateSecretRequest = {
     clear_totp?: boolean | undefined;
     clear_oauth?: boolean | undefined;
 };
-export type EventWebhookSigningSecretRequest = {
-    account_id?: string | undefined;
-    project_id: string;
-};
-export type EventWebhookSigningSecretResponse = {
-    subscription_id: string;
-    secret: string;
-    secret_label: string;
-};
-export type SignEventWebhookRequest = {
-    account_id?: string | undefined;
-    project_id: string;
-    delivery_id: string;
-    body: string;
-    event_id: string;
-    event_category: EventCategory;
-    action: string;
-    timestamp?: number | undefined;
-};
-export type SignEventWebhookResponse = {
-    headers: Record<string, string>;
-    timestamp: number;
-    signature: string;
-};
-export type EventIngestSigningSecretRequest = {
-    account_id?: string | undefined;
-    project_id: string;
-};
-export type EventIngestSigningSecretResponse = {
-    channel_id: string;
-    secret: string;
-    secret_label: string;
-};
-export type VerifyEventIngestSignatureRequest = {
-    account_id?: string | undefined;
-    project_id: string;
-    body: string;
-    signature_header: string;
-    algorithm?: 'sha256' | 'sha1' | undefined;
-    encoding?: 'hex' | 'base64' | undefined;
-    prefix?: string | undefined;
-};
-export type VerifyEventIngestSignatureResponse = {
-    valid: boolean;
-};
-export type GithubInstallationTokenRequest = {
-    account_id?: string | undefined;
-    project_id: string;
-    installation_id: string;
-    repo: string;
-};
-export type GithubInstallationTokenResponse = {
-    token: string;
-    expires_at?: string | undefined;
-};
 export type DeleteSecretResponse = {
     ok: boolean;
 };
@@ -9163,9 +9169,6 @@ export type SignupPayload = {
     firebaseToken: string;
     signupData: SignupData;
 };
-export type AccountApiVersionPolicy = {
-    default_api_version?: (typeof ApiVersions)[keyof typeof ApiVersions] | undefined;
-};
 /** An author-provided Elasticsearch query subtree validated by the View runtime. */
 export type ViewElasticsearchQuery = {
     [k: string]: unknown;
@@ -10559,6 +10562,8 @@ export type KnownAuditActionWire =
     | 'credentials_totp_generation'
     | 'publish'
     | 'unpublish'
+    | 'search'
+    | 'read'
     | 'inference'
     | 'embedding'
     | 'image_generation'
@@ -10572,6 +10577,7 @@ export type AuditAggregationDimensionMap = {
     project_id?: string | null | undefined;
     principal_id?: string | null | undefined;
     actor_id?: string | null | undefined;
+    user_id?: string | null | undefined;
     'details.pipeline'?: string | null | undefined;
     'details.verdict'?: string | null | undefined;
     'details.workflow_type'?: string | null | undefined;
@@ -10587,6 +10593,7 @@ export type AuditAggregationDimensionWire =
     | 'project_id'
     | 'principal_id'
     | 'actor_id'
+    | 'user_id'
     | 'details.pipeline'
     | 'details.verdict'
     | 'details.workflow_type'
@@ -10617,9 +10624,6 @@ export type AppToolCollectionArray = AppToolCollection[];
 export type SystemPackageQuery = {
     scope?: AppPackageScopeWire[] | undefined;
 };
-export type InternalSecretDeleteResponse = {
-    deleted: true;
-};
 export type SupportedIntegrations_ask_user_webhook = (typeof SupportedIntegrations)['ask_user_webhook'];
 export type SupportedIntegrations_resend = (typeof SupportedIntegrations)['resend'];
 export type SupportedIntegrations_linkup = (typeof SupportedIntegrations)['linkup'];
@@ -10649,7 +10653,6 @@ export type AppInstallationListEntryArray = AppInstallationListEntry[];
 export type BinaryFileResponse = string;
 /** The wire type of every registry component, by component name: what `ApiComponentType<N>` resolves. */
 export interface ApiComponentTypes {
-    AccountApiVersionPolicy: AccountApiVersionPolicy;
     Account: AccountFromSchema;
     UpdateAccountPayload: UpdateAccountPayloadFromSchema;
     StripeBillingStatusResponse: StripeBillingStatusResponseFromSchema;
@@ -11603,6 +11606,18 @@ export interface ApiComponentTypes {
     OAuthAuthStatusArray: OAuthAuthStatusArray;
     SetMcpApiKeyRequest: SetMcpApiKeyRequest;
     McpApiKeyStatus: McpApiKeyStatus;
+    AuditAdoptionActiveDays: AuditAdoptionActiveDays;
+    AuditAdoptionBucket: AuditAdoptionBucket;
+    AuditAdoptionFilter: AuditAdoptionFilter;
+    AuditAdoptionHistory: AuditAdoptionHistory;
+    AuditAdoptionPeriod: AuditAdoptionPeriod;
+    AuditAdoptionProject: AuditAdoptionProject;
+    AuditAdoptionQuery: AuditAdoptionQuery;
+    AuditAdoptionResponse: AuditAdoptionResponse;
+    AuditUsageQuery: AuditUsageQuery;
+    AuditUsageCounts: AuditUsageCounts;
+    AuditUsageBucket: AuditUsageBucket;
+    AuditUsageResponse: AuditUsageResponse;
     AuditMeter: AuditMeter;
     KnownAuditAction: KnownAuditActionWire;
     EventCategory: EventCategory;
@@ -11762,17 +11777,6 @@ export interface ApiComponentTypes {
     SecretProjectQuery: SecretProjectQuery;
     ListSecretsQuery: ListSecretsQuery;
     SecretLookupQuery: SecretLookupQuery;
-    EventWebhookSigningSecretRequest: EventWebhookSigningSecretRequest;
-    EventWebhookSigningSecretResponse: EventWebhookSigningSecretResponse;
-    SignEventWebhookRequest: SignEventWebhookRequest;
-    SignEventWebhookResponse: SignEventWebhookResponse;
-    EventIngestSigningSecretRequest: EventIngestSigningSecretRequest;
-    EventIngestSigningSecretResponse: EventIngestSigningSecretResponse;
-    VerifyEventIngestSignatureRequest: VerifyEventIngestSignatureRequest;
-    VerifyEventIngestSignatureResponse: VerifyEventIngestSignatureResponse;
-    GithubInstallationTokenRequest: GithubInstallationTokenRequest;
-    GithubInstallationTokenResponse: GithubInstallationTokenResponse;
-    InternalSecretDeleteResponse: InternalSecretDeleteResponse;
     SupportedIntegrations_ask_user_webhook: SupportedIntegrations_ask_user_webhook;
     SupportedIntegrations_resend: SupportedIntegrations_resend;
     SupportedIntegrations_linkup: SupportedIntegrations_linkup;
@@ -11880,10 +11884,6 @@ export interface ApiComponentTypes {
     CreateDelegationGrantPayload: CreateDelegationGrantPayload;
     DelegationGrant: DelegationGrant;
     DelegationGrantArray: DelegationGrantArray;
-    RunBudgetOwner: RunBudgetOwner;
-    RunBudgetUsage: RunBudgetUsage;
-    ReadRunBudgetUsagePayload: ReadRunBudgetUsagePayload;
-    RunBudgetTotals: RunBudgetTotals;
     RunBudgetCapability: RunBudgetCapability;
     RunBudgetCapabilityQuery: RunBudgetCapabilityQuery;
 }