pgbeam 0.4.11 → 0.4.12

package/dist/operations.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
+var operationsMap_gen = require('./operations-map.gen-mwk22v4l.cjs');
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.
@@ -501,6 +501,13 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
                 "type": "number",
                 "description": "Maximum number of items to return (1-100, default 20)."
             },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "If-None-Match",
                 "in": "header",
@@ -1874,6 +1881,45 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
         "responseType": "{ organizations: ({ id: string; name: string; role?: string; slug: string })[] }",
         "responseStatus": "200"
     },
+    "listPaymentResources": {
+        "operationId": "listPaymentResources",
+        "method": "GET",
+        "path": "/v1/payments/resources",
+        "summary": "List priced resources",
+        "description": "Lists what an agent can buy over the Machine Payments Protocol, with the\nunit, the pack size, and the price of one pack. Discovery only: the\n`WWW-Authenticate: Payment` challenge returned by a priced operation is\nalways authoritative.\n\nThis endpoint takes no authentication so an agent can read the price\nbefore it holds a credential.\n",
+        "parameters": [],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ resources: ({ amount_per_pack: number; currency: string; description?: string; id: string; max_packs: number; min_packs: number; operation_id?: string; title: string; unit: string; units_per_pack: number })[] }",
+        "responseStatus": "200"
+    },
+    "createBudgetTopup": {
+        "operationId": "createBudgetTopup",
+        "method": "POST",
+        "path": "/v1/payments/budget-topups",
+        "summary": "Buy query budget for an agent credential",
+        "description": "Buys additional queries for the agent credential this request is\nauthenticated as, using the Machine Payments Protocol (HTTP 402 with the\n`Payment` authentication scheme).\n\nAuthenticate with the credential's hosted MCP token (`pba_...`) as a\nbearer token. The credential identifies itself, so no human and no\ndashboard session is involved.\n\nWithout a payment credential the response is `402` carrying a complete\n`WWW-Authenticate: Payment` challenge. Fulfil it, then repeat the request\nwith the credential in the `Payment-Authorization` header (the challenge\nselects that field so the bearer token can stay in `Authorization`). On\nsuccess the queries are granted, streamed to the data planes, and the\nresponse carries a `Payment-Receipt` header.\n\nPurchased queries do not raise the credential's policy budget. They are a\nseparate pool the proxy spends only once the policy's hourly and daily\nwindows have refused a statement, and they expire.\n",
+        "parameters": [
+            {
+                "name": "Payment-Authorization",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "The MPP payment credential, `Payment <base64url>`, echoing the\nchallenge from the `402` and carrying the method-specific proof. For\nthe `stripe` method the payload is `{\"spt\": \"spt_...\"}`, a single-use\nShared Payment Token.\n"
+            },
+            {
+                "name": "Accept-Payment",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Payment method and intent preferences, for example `stripe/charge`.\nIgnored when it matches nothing this endpoint offers.\n"
+            }
+        ],
+        "requestBodyType": "{ packs?: number }",
+        "requestBodyRequired": false,
+        "responseType": "{ amount: number; credential_id: string; currency: string; expires_at: string; grant_id: string; payment_reference?: string; queries: number; receipt?: string }",
+        "responseStatus": "201"
+    },
     "listPolicyProfiles": {
         "operationId": "listPolicyProfiles",
         "method": "GET",
@@ -2285,7 +2331,7 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
         "method": "GET",
         "path": "/v1/databases/{database_id}/replicas",
         "summary": "List replicas",
-        "description": "Lists all read replicas for a database.",
+        "description": "Lists a database's read replicas.",
         "parameters": [
             {
                 "name": "database_id",
@@ -2294,6 +2340,20 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
                 "type": "string",
                 "description": "Unique database identifier (prefixed, e.g. db_xxx)."
             },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "If-None-Match",
                 "in": "header",
@@ -2477,6 +2537,20 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
                 "type": "string",
                 "description": "Unique organization identifier."
             },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "If-None-Match",
                 "in": "header",
@@ -2487,7 +2561,7 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[] }",
+        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[]; next_page_token?: string }",
         "responseStatus": "200"
     },
     "createSelfHostEnrollment": {
@@ -2613,6 +2687,13 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
                 "type": "number",
                 "description": "Number of results per page (1-100, default 20)."
             },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "page",
                 "in": "query",
@@ -2630,7 +2711,7 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ cases: ({ case_number: number; closed_at?: string; created_at: string; id: string; message_count?: number; org_id: string; severity: number; slack_channel_id?: string; slack_thread_ts?: string; status: \"open\" | \"closed\"; title: string; updated_at: string; user_id: string })[]; total: number }",
+        "responseType": "{ cases: ({ case_number: number; closed_at?: string; created_at: string; id: string; message_count?: number; org_id: string; severity: number; slack_channel_id?: string; slack_thread_ts?: string; status: \"open\" | \"closed\"; title: string; updated_at: string; user_id: string })[]; next_page_token?: string; total: number }",
         "responseStatus": "200"
     },
     "createSupportCase": {
@@ -2767,6 +2848,18 @@ var operationsMap_gen = require('./operations-map.gen-iasufy3r.cjs');
         "responseType": "",
         "responseStatus": "200"
     },
+    "scanText": {
+        "operationId": "scanText",
+        "method": "POST",
+        "path": "/v1/scan/text",
+        "summary": "Scan untrusted text for prompt injection",
+        "description": "Inspects one piece of untrusted text for the techniques used to smuggle instructions into a model's context, and returns a verdict, a recommended action, and the evidence behind it.\n\nTwo detector families run. The structural layer reads codepoints and scripts: invisible-codepoint runs, Unicode Tag smuggling, unterminated bidirectional overrides, and mixed-script words. None of those has a legitimate reason to appear in ordinary text, so a structural finding is a fact worth acting on. The lexical layer is exact-phrase matching with Unicode normalization, which is worth what exact-phrase matching is worth: it is a reason to look, and a support ticket quoting an attack contains the attack. Neither layer is a semantic classifier, and this endpoint does not pretend to catch prose that is hostile only in its meaning. The measured confusion matrix and the list of evasions that are known to work are published at https://pgbeam.com/docs/prompt-scan.\n\nAuthentication is optional. Anonymous callers get a free daily allowance keyed on their source address; an API key moves the allowance onto the organization. Past the allowance the endpoint answers 402 with a payment challenge.\n\nThe submitted text is held in memory for the duration of the request and is never logged, stored, or used to train anything. An `Idempotency-Key` is refused on this operation rather than honoured, because honouring it would persist the response, and the response quotes the submitted text back. The operation has no side effects beyond metering, so a retry is safe without one.",
+        "parameters": [],
+        "requestBodyType": "{ include_evidence?: boolean; layers?: (\"structural\" | \"lexical\")[]; text: string }",
+        "requestBodyRequired": true,
+        "responseType": "{ action: \"allow\" | \"review\" | \"block\"; action_reason: string; advice: string; engine: string; findings: ({ confidence: \"low\" | \"medium\" | \"high\"; detail: string; evidence?: string; layer: \"structural\" | \"lexical\"; offset: number; technique: \"invisible_run\" | \"tag_smuggling\" | \"bidi_override\" | \"mixed_script\" | \"instruction_phrase\" | \"invalid_encoding\" | \"truncated\" })[]; has_structural: boolean; highest_confidence?: \"low\" | \"medium\" | \"high\"; quota: { free_limit: number; free_remaining: number; paid_remaining: number; resets_at: string }; scanned_bytes: number; truncated: boolean; verdict: \"clean\" | \"suspicious\" | \"unscannable\" }",
+        "responseStatus": "200"
+    },
     "getOrganizationUsage": {
         "operationId": "getOrganizationUsage",
         "method": "GET",

package/dist/operations.d.cts

@@ -1,4 +1,4 @@
-export { uB as ApiOperations, uC as ApiTag, uD as RequestMap, uE as Route, uF as operationsByPath, uG as operationsByTag } from './operations-map.gen-j0pyh1mi.js';
+export { xQ as ApiOperations, xR as ApiTag, xS as RequestMap, xT as Route, xU as operationsByPath, xV as operationsByTag } from './operations-map.gen-w5n73m9l.js';
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.

package/dist/operations.d.mts

@@ -1,4 +1,4 @@
-export { uB as ApiOperations, uC as ApiTag, uD as RequestMap, uE as Route, uF as operationsByPath, uG as operationsByTag } from './operations-map.gen-j0pyh1mi.js';
+export { xQ as ApiOperations, xR as ApiTag, xS as RequestMap, xT as Route, xU as operationsByPath, xV as operationsByTag } from './operations-map.gen-w5n73m9l.js';
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.

package/dist/operations.mjs

@@ -1,4 +1,4 @@
-export { o as operationsByPath, a as operationsByTag } from './operations-map.gen-nws17nv5.js';
+export { o as operationsByPath, a as operationsByTag } from './operations-map.gen-cr323vpc.js';
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.
@@ -499,6 +499,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "type": "number",
                 "description": "Maximum number of items to return (1-100, default 20)."
             },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "If-None-Match",
                 "in": "header",
@@ -1872,6 +1879,45 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "{ organizations: ({ id: string; name: string; role?: string; slug: string })[] }",
         "responseStatus": "200"
     },
+    "listPaymentResources": {
+        "operationId": "listPaymentResources",
+        "method": "GET",
+        "path": "/v1/payments/resources",
+        "summary": "List priced resources",
+        "description": "Lists what an agent can buy over the Machine Payments Protocol, with the\nunit, the pack size, and the price of one pack. Discovery only: the\n`WWW-Authenticate: Payment` challenge returned by a priced operation is\nalways authoritative.\n\nThis endpoint takes no authentication so an agent can read the price\nbefore it holds a credential.\n",
+        "parameters": [],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ resources: ({ amount_per_pack: number; currency: string; description?: string; id: string; max_packs: number; min_packs: number; operation_id?: string; title: string; unit: string; units_per_pack: number })[] }",
+        "responseStatus": "200"
+    },
+    "createBudgetTopup": {
+        "operationId": "createBudgetTopup",
+        "method": "POST",
+        "path": "/v1/payments/budget-topups",
+        "summary": "Buy query budget for an agent credential",
+        "description": "Buys additional queries for the agent credential this request is\nauthenticated as, using the Machine Payments Protocol (HTTP 402 with the\n`Payment` authentication scheme).\n\nAuthenticate with the credential's hosted MCP token (`pba_...`) as a\nbearer token. The credential identifies itself, so no human and no\ndashboard session is involved.\n\nWithout a payment credential the response is `402` carrying a complete\n`WWW-Authenticate: Payment` challenge. Fulfil it, then repeat the request\nwith the credential in the `Payment-Authorization` header (the challenge\nselects that field so the bearer token can stay in `Authorization`). On\nsuccess the queries are granted, streamed to the data planes, and the\nresponse carries a `Payment-Receipt` header.\n\nPurchased queries do not raise the credential's policy budget. They are a\nseparate pool the proxy spends only once the policy's hourly and daily\nwindows have refused a statement, and they expire.\n",
+        "parameters": [
+            {
+                "name": "Payment-Authorization",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "The MPP payment credential, `Payment <base64url>`, echoing the\nchallenge from the `402` and carrying the method-specific proof. For\nthe `stripe` method the payload is `{\"spt\": \"spt_...\"}`, a single-use\nShared Payment Token.\n"
+            },
+            {
+                "name": "Accept-Payment",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Payment method and intent preferences, for example `stripe/charge`.\nIgnored when it matches nothing this endpoint offers.\n"
+            }
+        ],
+        "requestBodyType": "{ packs?: number }",
+        "requestBodyRequired": false,
+        "responseType": "{ amount: number; credential_id: string; currency: string; expires_at: string; grant_id: string; payment_reference?: string; queries: number; receipt?: string }",
+        "responseStatus": "201"
+    },
     "listPolicyProfiles": {
         "operationId": "listPolicyProfiles",
         "method": "GET",
@@ -2283,7 +2329,7 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "method": "GET",
         "path": "/v1/databases/{database_id}/replicas",
         "summary": "List replicas",
-        "description": "Lists all read replicas for a database.",
+        "description": "Lists a database's read replicas.",
         "parameters": [
             {
                 "name": "database_id",
@@ -2292,6 +2338,20 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "type": "string",
                 "description": "Unique database identifier (prefixed, e.g. db_xxx)."
             },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "If-None-Match",
                 "in": "header",
@@ -2475,6 +2535,20 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "type": "string",
                 "description": "Unique organization identifier."
             },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "If-None-Match",
                 "in": "header",
@@ -2485,7 +2559,7 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[] }",
+        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[]; next_page_token?: string }",
         "responseStatus": "200"
     },
     "createSelfHostEnrollment": {
@@ -2611,6 +2685,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "type": "number",
                 "description": "Number of results per page (1-100, default 20)."
             },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "page",
                 "in": "query",
@@ -2628,7 +2709,7 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ cases: ({ case_number: number; closed_at?: string; created_at: string; id: string; message_count?: number; org_id: string; severity: number; slack_channel_id?: string; slack_thread_ts?: string; status: \"open\" | \"closed\"; title: string; updated_at: string; user_id: string })[]; total: number }",
+        "responseType": "{ cases: ({ case_number: number; closed_at?: string; created_at: string; id: string; message_count?: number; org_id: string; severity: number; slack_channel_id?: string; slack_thread_ts?: string; status: \"open\" | \"closed\"; title: string; updated_at: string; user_id: string })[]; next_page_token?: string; total: number }",
         "responseStatus": "200"
     },
     "createSupportCase": {
@@ -2765,6 +2846,18 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "",
         "responseStatus": "200"
     },
+    "scanText": {
+        "operationId": "scanText",
+        "method": "POST",
+        "path": "/v1/scan/text",
+        "summary": "Scan untrusted text for prompt injection",
+        "description": "Inspects one piece of untrusted text for the techniques used to smuggle instructions into a model's context, and returns a verdict, a recommended action, and the evidence behind it.\n\nTwo detector families run. The structural layer reads codepoints and scripts: invisible-codepoint runs, Unicode Tag smuggling, unterminated bidirectional overrides, and mixed-script words. None of those has a legitimate reason to appear in ordinary text, so a structural finding is a fact worth acting on. The lexical layer is exact-phrase matching with Unicode normalization, which is worth what exact-phrase matching is worth: it is a reason to look, and a support ticket quoting an attack contains the attack. Neither layer is a semantic classifier, and this endpoint does not pretend to catch prose that is hostile only in its meaning. The measured confusion matrix and the list of evasions that are known to work are published at https://pgbeam.com/docs/prompt-scan.\n\nAuthentication is optional. Anonymous callers get a free daily allowance keyed on their source address; an API key moves the allowance onto the organization. Past the allowance the endpoint answers 402 with a payment challenge.\n\nThe submitted text is held in memory for the duration of the request and is never logged, stored, or used to train anything. An `Idempotency-Key` is refused on this operation rather than honoured, because honouring it would persist the response, and the response quotes the submitted text back. The operation has no side effects beyond metering, so a retry is safe without one.",
+        "parameters": [],
+        "requestBodyType": "{ include_evidence?: boolean; layers?: (\"structural\" | \"lexical\")[]; text: string }",
+        "requestBodyRequired": true,
+        "responseType": "{ action: \"allow\" | \"review\" | \"block\"; action_reason: string; advice: string; engine: string; findings: ({ confidence: \"low\" | \"medium\" | \"high\"; detail: string; evidence?: string; layer: \"structural\" | \"lexical\"; offset: number; technique: \"invisible_run\" | \"tag_smuggling\" | \"bidi_override\" | \"mixed_script\" | \"instruction_phrase\" | \"invalid_encoding\" | \"truncated\" })[]; has_structural: boolean; highest_confidence?: \"low\" | \"medium\" | \"high\"; quota: { free_limit: number; free_remaining: number; paid_remaining: number; resets_at: string }; scanned_bytes: number; truncated: boolean; verdict: \"clean\" | \"suspicious\" | \"unscannable\" }",
+        "responseStatus": "200"
+    },
     "getOrganizationUsage": {
         "operationId": "getOrganizationUsage",
         "method": "GET",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pgbeam",
-  "version": "0.4.11",
+  "version": "0.4.12",
   "description": "TypeScript SDK for the PgBeam API, a Postgres proxy for safe AI agent access with policy enforcement in the wire protocol",
   "type": "module",
   "exports": {