pgbeam 0.4.2 → 0.4.8

package/dist/operations.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var operationsMap_gen = require('./operations-map.gen-c7vqzfzd.cjs');
+var operationsMap_gen = require('./operations-map.gen-gco09oqg.cjs');
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.
@@ -208,7 +208,7 @@ var operationsMap_gen = require('./operations-map.gen-c7vqzfzd.cjs');
         ],
         "requestBodyType": "{ limit?: number; lookback_days?: number }",
         "requestBodyRequired": false,
-        "responseType": "{ candidate?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; message?: string; notes?: string[]; observed_entries: number; observed_queries: number; replay?: { items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }; sufficient_history: boolean; window_end: string; window_start: string }",
+        "responseType": "{ candidate?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; message?: string; notes?: string[]; observed_entries: number; observed_queries: number; replay?: { items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { bound_credentials?: number; distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; traffic_scope: \"project\" | \"bound_credentials\"; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }; sufficient_history: boolean; window_end: string; window_start: string }",
         "responseStatus": "200"
     },
     "listAnomalyAlerts": {
@@ -512,6 +512,47 @@ var operationsMap_gen = require('./operations-map.gen-c7vqzfzd.cjs');
         "responseType": "",
         "responseStatus": "200"
     },
+    "getAuditSessionSummary": {
+        "operationId": "getAuditSessionSummary",
+        "method": "GET",
+        "path": "/v1/projects/{project_id}/audit-logs/sessions/{session_id}",
+        "summary": "Summarize one agent session",
+        "description": "Groups a session's audit entries into one deterministic summary: the credentials and origins involved, the window it spans, how many statements were allowed, blocked, masked and truncated, the rows and bytes it moved, and the tables it read, wrote and was refused. No model is involved, so the same entries always summarize the same way. Returns metadata only (table names and counts), never row values, and requires the same audit:read permission the list and export endpoints do.",
+        "parameters": [
+            {
+                "name": "project_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
+            },
+            {
+                "name": "session_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Session identifier from an audit entry's session_id field. Unique per connection within a proxy instance, not over time."
+            },
+            {
+                "name": "start",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries at or after this timestamp (inclusive lower bound)."
+            },
+            {
+                "name": "end",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries strictly older than this timestamp (cursor / upper bound)."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ allowed: number; blocked: number; bytes_out: number; credential_ids: string[]; duration_ms: number; ended_at: string; entries_scanned: number; latency_ms_total: number; masked: number; other: number; project_id: string; rows_returned: number; scan_truncated: boolean; session_id: string; sources: string[]; started_at: string; statements: number; tables_blocked: string[]; tables_read: string[]; tables_written: string[]; truncated: number; unparsed_statements: number }",
+        "responseStatus": "200"
+    },
     "verifyAuditChain": {
         "operationId": "verifyAuditChain",
         "method": "GET",
@@ -543,7 +584,7 @@ var operationsMap_gen = require('./operations-map.gen-c7vqzfzd.cjs');
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ chain_end_seq?: number; chain_start_seq?: number; failure_reason?: string; first_broken_seq?: number; ok: boolean; unchained_count: number; verified_at: string; verified_count: number }",
+        "responseType": "{ anchor_status?: string; anchor_verified_from_seq?: number; anchor_verified_through_seq?: number; chain_end_seq?: number; chain_start_seq?: number; failure_reason?: string; first_broken_seq?: number; keyed_count: number; link_status?: string; link_verified_from_seq?: number; ok: boolean; unchained_count: number; verified_at: string; verified_count: number }",
         "responseStatus": "200"
     },
     "listPlans": {
@@ -1528,9 +1569,9 @@ var operationsMap_gen = require('./operations-map.gen-c7vqzfzd.cjs');
                 "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
             }
         ],
-        "requestBodyType": "{ credential_id?: string; end_ts?: string; limit?: number; policy?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; policy_id?: string; start_ts?: string }",
+        "requestBodyType": "{ bound_policy_id?: string; credential_id?: string; end_ts?: string; limit?: number; policy?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; policy_id?: string; start_ts?: string }",
         "requestBodyRequired": true,
-        "responseType": "{ items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }",
+        "responseType": "{ items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { bound_credentials?: number; distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; traffic_scope: \"project\" | \"bound_credentials\"; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }",
         "responseStatus": "200"
     },
     "listProjects": {
@@ -2177,6 +2218,40 @@ var operationsMap_gen = require('./operations-map.gen-c7vqzfzd.cjs');
         "responseType": "{ usage: ({ bytes_transferred: number; cache_hits: number; cache_misses: number; connection_seconds: number; day: string; queries_total: number; region: string })[] }",
         "responseStatus": "200"
     },
+    "getAgentUsageBreakdown": {
+        "operationId": "getAgentUsageBreakdown",
+        "method": "GET",
+        "path": "/v1/projects/{project_id}/usage/agents",
+        "summary": "Break down project usage by agent credential",
+        "description": "Aggregates the audit trail into per-agent usage for a window: statements by decision, rows and bytes returned, the cache outcome breakdown, and latency percentiles. Read-only, derived entirely from entries the gateway already records.\n\nGrouped by credential, not by session. `session_id` is 32 bits of randomness minted per connection, so it identifies a connection rather than an agent or a run, and at scale it collides; the credential is the only stable identity in the trail.\n\nThis endpoint reports usage and deliberately attributes no dollar figure to an agent. Overage is computed on the organization's total against a plan limit, so no single agent causes it independently of the others, and any per-agent split of that bill is a policy choice rather than a measurement. The organization's limits and marginal rates are returned alongside the usage so a caller can apply its own policy, with both meanings of a zero limit already resolved.\n\nThree things are reported rather than assumed. Usage recorded against no credential is its own line, so agents plus unattributed equals totals exactly. Latency covers only entries that ran and carried a finite value: every refusal writes a literal zero because there was nothing to time, and counting those would drag an agent's percentiles toward zero in proportion to how often it was refused, so the heavily blocked agent would report the fastest queries. And gap markers left by undelivered entries set `complete` to false, since a total over a trail with holes in it is a floor, not a measurement.\n\nBoth `start` and `end` are optional. Omitting `end` means now; omitting `start` means 30 days before the end. The window is half-open and is capped at 92 days, because this aggregate reads every row in the window on the request path and an unbounded one would sort a year of latencies per group. `requested_start` and `requested_end` echo the window that was actually used, so a caller that pinned neither still knows what the totals cover.",
+        "parameters": [
+            {
+                "name": "project_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
+            },
+            {
+                "name": "start",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries at or after this timestamp (inclusive lower bound)."
+            },
+            {
+                "name": "end",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries strictly older than this timestamp (cursor / upper bound)."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ agents: ({ allowed: number; blocked: number; bytes_out: number; cache_bypass: number; cache_hit: number; cache_miss: number; cache_none: number; cache_stale: number; credential_id?: string; entries: number; first_seen?: string; last_seen?: string; latency_measured: number; latency_ms_total: number; latency_p50_ms: number; latency_p95_ms: number; latency_p99_ms: number; latency_unmeasured: number; masked: number; rows_returned: number; truncated: number })[]; complete: boolean; drop_markers: { entries_dropped: number; markers: number; markers_unparsed: number; reasons: string[]; truncated: boolean }; marginal_rates: { bytes_overage_billable: boolean; bytes_per_month: number; overage_per_1k_queries: number; overage_per_gb: number; plan: string; queries_per_day: number; query_overage_billable: boolean }; project_id: string; requested_end: string; requested_start: string; totals: { allowed: number; blocked: number; bytes_out: number; cache_bypass: number; cache_hit: number; cache_miss: number; cache_none: number; cache_stale: number; credential_id?: string; entries: number; first_seen?: string; last_seen?: string; latency_measured: number; latency_ms_total: number; latency_p50_ms: number; latency_p95_ms: number; latency_p99_ms: number; latency_unmeasured: number; masked: number; rows_returned: number; truncated: number }; unattributed: { allowed: number; blocked: number; bytes_out: number; cache_bypass: number; cache_hit: number; cache_miss: number; cache_none: number; cache_stale: number; credential_id?: string; entries: number; first_seen?: string; last_seen?: string; latency_measured: number; latency_ms_total: number; latency_p50_ms: number; latency_p95_ms: number; latency_p99_ms: number; latency_unmeasured: number; masked: number; rows_returned: number; truncated: number }; window_end: string; window_start: string }",
+        "responseStatus": "200"
+    },
     "listWebhookEndpoints": {
         "operationId": "listWebhookEndpoints",
         "method": "GET",

package/dist/operations.d.cts

@@ -1,4 +1,4 @@
-export { qQ as ApiOperations, qR as ApiTag, qS as RequestMap, qT as Route, qU as operationsByPath, qV as operationsByTag } from './operations-map.gen-ihvz917v.js';
+export { qd as ApiOperations, qe as ApiTag, qf as RequestMap, qg as Route, qh as operationsByPath, qi as operationsByTag } from './operations-map.gen-oqab3wi9.js';
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.

package/dist/operations.d.mts

@@ -1,4 +1,4 @@
-export { qQ as ApiOperations, qR as ApiTag, qS as RequestMap, qT as Route, qU as operationsByPath, qV as operationsByTag } from './operations-map.gen-ihvz917v.js';
+export { qd as ApiOperations, qe as ApiTag, qf as RequestMap, qg as Route, qh as operationsByPath, qi as operationsByTag } from './operations-map.gen-oqab3wi9.js';
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.

package/dist/operations.mjs

@@ -1,4 +1,4 @@
-export { o as operationsByPath, a as operationsByTag } from './operations-map.gen-g44nmkz5.js';
+export { o as operationsByPath, a as operationsByTag } from './operations-map.gen-dojer3ji.js';
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.
@@ -206,7 +206,7 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         ],
         "requestBodyType": "{ limit?: number; lookback_days?: number }",
         "requestBodyRequired": false,
-        "responseType": "{ candidate?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; message?: string; notes?: string[]; observed_entries: number; observed_queries: number; replay?: { items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }; sufficient_history: boolean; window_end: string; window_start: string }",
+        "responseType": "{ candidate?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; message?: string; notes?: string[]; observed_entries: number; observed_queries: number; replay?: { items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { bound_credentials?: number; distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; traffic_scope: \"project\" | \"bound_credentials\"; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }; sufficient_history: boolean; window_end: string; window_start: string }",
         "responseStatus": "200"
     },
     "listAnomalyAlerts": {
@@ -510,6 +510,47 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "",
         "responseStatus": "200"
     },
+    "getAuditSessionSummary": {
+        "operationId": "getAuditSessionSummary",
+        "method": "GET",
+        "path": "/v1/projects/{project_id}/audit-logs/sessions/{session_id}",
+        "summary": "Summarize one agent session",
+        "description": "Groups a session's audit entries into one deterministic summary: the credentials and origins involved, the window it spans, how many statements were allowed, blocked, masked and truncated, the rows and bytes it moved, and the tables it read, wrote and was refused. No model is involved, so the same entries always summarize the same way. Returns metadata only (table names and counts), never row values, and requires the same audit:read permission the list and export endpoints do.",
+        "parameters": [
+            {
+                "name": "project_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
+            },
+            {
+                "name": "session_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Session identifier from an audit entry's session_id field. Unique per connection within a proxy instance, not over time."
+            },
+            {
+                "name": "start",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries at or after this timestamp (inclusive lower bound)."
+            },
+            {
+                "name": "end",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries strictly older than this timestamp (cursor / upper bound)."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ allowed: number; blocked: number; bytes_out: number; credential_ids: string[]; duration_ms: number; ended_at: string; entries_scanned: number; latency_ms_total: number; masked: number; other: number; project_id: string; rows_returned: number; scan_truncated: boolean; session_id: string; sources: string[]; started_at: string; statements: number; tables_blocked: string[]; tables_read: string[]; tables_written: string[]; truncated: number; unparsed_statements: number }",
+        "responseStatus": "200"
+    },
     "verifyAuditChain": {
         "operationId": "verifyAuditChain",
         "method": "GET",
@@ -541,7 +582,7 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ chain_end_seq?: number; chain_start_seq?: number; failure_reason?: string; first_broken_seq?: number; ok: boolean; unchained_count: number; verified_at: string; verified_count: number }",
+        "responseType": "{ anchor_status?: string; anchor_verified_from_seq?: number; anchor_verified_through_seq?: number; chain_end_seq?: number; chain_start_seq?: number; failure_reason?: string; first_broken_seq?: number; keyed_count: number; link_status?: string; link_verified_from_seq?: number; ok: boolean; unchained_count: number; verified_at: string; verified_count: number }",
         "responseStatus": "200"
     },
     "listPlans": {
@@ -1526,9 +1567,9 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
             }
         ],
-        "requestBodyType": "{ credential_id?: string; end_ts?: string; limit?: number; policy?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; policy_id?: string; start_ts?: string }",
+        "requestBodyType": "{ bound_policy_id?: string; credential_id?: string; end_ts?: string; limit?: number; policy?: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; policy_id?: string; start_ts?: string }",
         "requestBodyRequired": true,
-        "responseType": "{ items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }",
+        "responseType": "{ items: ({ change: \"newly_blocked\" | \"newly_allowed\" | \"still_allowed\" | \"still_blocked\"; first_seen: string; last_seen: string; occurrences: number; query_hash: string; recorded_event: string; recorded_rule?: string; result: { hint?: string; masked_columns?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\" })[]; notes?: string[]; reason: string; rewritten_sql?: string; row_filter_predicate?: string; rule: string; verdict: \"allow\" | \"block\" | \"mask\" | \"row-filter\" }; sql: string; statement_kind?: string })[]; summary: { bound_credentials?: number; distinct_queries: number; entries_scanned: number; evaluated: number; newly_allowed: number; newly_blocked: number; skipped_unparseable: number; traffic_scope: \"project\" | \"bound_credentials\"; truncated: boolean; would_allow: number; would_block: number; would_mask: number; would_row_filter: number } }",
         "responseStatus": "200"
     },
     "listProjects": {
@@ -2175,6 +2216,40 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "{ usage: ({ bytes_transferred: number; cache_hits: number; cache_misses: number; connection_seconds: number; day: string; queries_total: number; region: string })[] }",
         "responseStatus": "200"
     },
+    "getAgentUsageBreakdown": {
+        "operationId": "getAgentUsageBreakdown",
+        "method": "GET",
+        "path": "/v1/projects/{project_id}/usage/agents",
+        "summary": "Break down project usage by agent credential",
+        "description": "Aggregates the audit trail into per-agent usage for a window: statements by decision, rows and bytes returned, the cache outcome breakdown, and latency percentiles. Read-only, derived entirely from entries the gateway already records.\n\nGrouped by credential, not by session. `session_id` is 32 bits of randomness minted per connection, so it identifies a connection rather than an agent or a run, and at scale it collides; the credential is the only stable identity in the trail.\n\nThis endpoint reports usage and deliberately attributes no dollar figure to an agent. Overage is computed on the organization's total against a plan limit, so no single agent causes it independently of the others, and any per-agent split of that bill is a policy choice rather than a measurement. The organization's limits and marginal rates are returned alongside the usage so a caller can apply its own policy, with both meanings of a zero limit already resolved.\n\nThree things are reported rather than assumed. Usage recorded against no credential is its own line, so agents plus unattributed equals totals exactly. Latency covers only entries that ran and carried a finite value: every refusal writes a literal zero because there was nothing to time, and counting those would drag an agent's percentiles toward zero in proportion to how often it was refused, so the heavily blocked agent would report the fastest queries. And gap markers left by undelivered entries set `complete` to false, since a total over a trail with holes in it is a floor, not a measurement.\n\nBoth `start` and `end` are optional. Omitting `end` means now; omitting `start` means 30 days before the end. The window is half-open and is capped at 92 days, because this aggregate reads every row in the window on the request path and an unbounded one would sort a year of latencies per group. `requested_start` and `requested_end` echo the window that was actually used, so a caller that pinned neither still knows what the totals cover.",
+        "parameters": [
+            {
+                "name": "project_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
+            },
+            {
+                "name": "start",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries at or after this timestamp (inclusive lower bound)."
+            },
+            {
+                "name": "end",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Return entries strictly older than this timestamp (cursor / upper bound)."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ agents: ({ allowed: number; blocked: number; bytes_out: number; cache_bypass: number; cache_hit: number; cache_miss: number; cache_none: number; cache_stale: number; credential_id?: string; entries: number; first_seen?: string; last_seen?: string; latency_measured: number; latency_ms_total: number; latency_p50_ms: number; latency_p95_ms: number; latency_p99_ms: number; latency_unmeasured: number; masked: number; rows_returned: number; truncated: number })[]; complete: boolean; drop_markers: { entries_dropped: number; markers: number; markers_unparsed: number; reasons: string[]; truncated: boolean }; marginal_rates: { bytes_overage_billable: boolean; bytes_per_month: number; overage_per_1k_queries: number; overage_per_gb: number; plan: string; queries_per_day: number; query_overage_billable: boolean }; project_id: string; requested_end: string; requested_start: string; totals: { allowed: number; blocked: number; bytes_out: number; cache_bypass: number; cache_hit: number; cache_miss: number; cache_none: number; cache_stale: number; credential_id?: string; entries: number; first_seen?: string; last_seen?: string; latency_measured: number; latency_ms_total: number; latency_p50_ms: number; latency_p95_ms: number; latency_p99_ms: number; latency_unmeasured: number; masked: number; rows_returned: number; truncated: number }; unattributed: { allowed: number; blocked: number; bytes_out: number; cache_bypass: number; cache_hit: number; cache_miss: number; cache_none: number; cache_stale: number; credential_id?: string; entries: number; first_seen?: string; last_seen?: string; latency_measured: number; latency_ms_total: number; latency_p50_ms: number; latency_p95_ms: number; latency_p99_ms: number; latency_unmeasured: number; masked: number; rows_returned: number; truncated: number }; window_end: string; window_start: string }",
+        "responseStatus": "200"
+    },
     "listWebhookEndpoints": {
         "operationId": "listWebhookEndpoints",
         "method": "GET",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pgbeam",
-  "version": "0.4.2",
-  "description": "TypeScript SDK for the PgBeam API — globally distributed PostgreSQL proxy platform",
+  "version": "0.4.8",
+  "description": "TypeScript SDK for the PgBeam API, a Postgres proxy for safe AI agent access with policy enforcement in the wire protocol",
   "type": "module",
   "exports": {
     "./package.json": "./package.json",
@@ -47,14 +47,14 @@
   ],
   "homepage": "https://pgbeam.com",
   "devDependencies": {
-    "@kubb/adapter-oas": "5.0.0-beta.11",
+    "@kubb/adapter-oas": "5.0.6",
     "@kubb/middleware-barrel": "5.0.0-beta.35",
-    "@kubb/plugin-ts": "5.0.0-beta.10",
+    "@kubb/plugin-ts": "5.0.0",
+    "@pgbeam/config": "0.0.1",
     "@typescript/typescript6": "6.0.2",
     "bunchee": "7.0.1",
-    "kubb": "5.0.0-beta.11",
-    "typescript": "7.0.2",
-    "@pgbeam/config": "0.0.1"
+    "kubb": "5.0.6",
+    "typescript": "7.0.2"
   },
   "scripts": {
     "build": "bunchee",