qati-sdk 1.0.4 → 1.0.6

package/dist/index.d.cts

@@ -701,6 +701,27 @@ declare class ExplainResource {
     get(entityKey: string, atTimestamp?: Date | string, topDominantNeighbors?: number, topEvents?: number): Promise<ExplainResponse>;
 }
 
+type QuotaUpdateRequest = {
+    max_tracked_entities: number;
+    max_monthly_events: number;
+    max_events_per_second: number;
+};
+type QuotaResponse = {
+    id: string;
+    tenant_id: string;
+    max_tracked_entities: number;
+    max_monthly_events: number;
+    max_events_per_second: number;
+};
+
+declare class QuotaResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    get(tenantId: string): Promise<QuotaResponse>;
+    upsert(tenantId: string, body: QuotaUpdateRequest): Promise<QuotaResponse>;
+}
+
 /**
  * Response body for `GET /v1/tenants/verify-credentials` (Query API).
  */
@@ -822,6 +843,63 @@ declare class TrustStateResource {
     getTrustStates(entityType: EntityTypeLowerCase, entityIds: readonly string[], options?: TrustStateOptions): Promise<TrustState[]>;
 }
 
+type WebhookCreateRequest = {
+    url: string;
+    subscribed_event_types?: string[];
+    enabled?: boolean;
+};
+type WebhookCreateResponse = {
+    id: string;
+    tenant_id: string;
+    url: string;
+    subscribed_event_types: string[];
+    enabled: boolean;
+    secret: string;
+    created_at: string;
+};
+type WebhookResponse = {
+    id: string;
+    tenant_id: string;
+    url: string;
+    subscribed_event_types: string[];
+    enabled: boolean;
+    consecutive_failures: number;
+    disabled_at: string | null;
+    created_at: string;
+    updated_at: string;
+    new_secret?: string | null;
+};
+type WebhookPatchRequest = {
+    url?: string;
+    subscribed_event_types?: string[];
+    enabled?: boolean;
+    rotate_secret?: boolean;
+};
+type WebhookTestDeliveryResponse = {
+    delivery_id: string;
+};
+type WebhookEventEnvelope = {
+    /** Delivery id; also present in the X-QATI-Event-Id request header. */
+    id: string;
+    /** Registered webhook endpoint id. */
+    webhook_id: string;
+    type: string;
+    tenant_id: string;
+    triggered_at: string;
+    data: TrustState | AdvisoryResponse;
+};
+
+declare class WebhookResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    list(tenantId: string): Promise<WebhookResponse[]>;
+    create(tenantId: string, body: WebhookCreateRequest): Promise<WebhookCreateResponse>;
+    patch(tenantId: string, webhookId: string, body: WebhookPatchRequest): Promise<WebhookResponse>;
+    delete(tenantId: string, webhookId: string): Promise<void>;
+    test(tenantId: string, webhookId: string): Promise<WebhookTestDeliveryResponse>;
+}
+
 /**
  * High-level QATI API client: namespaces for tenant, trust state, advisories, explain, and batched event ingestion.
  *
@@ -841,6 +919,8 @@ declare class Client extends HttpClient {
     private readonly _advisory;
     private readonly _explain;
     private readonly _events;
+    private readonly _webhooks;
+    private readonly _quotas;
     /**
      * @param config - Resolved SDK configuration (typically `session.config`).
      * @param axiosInstances - Optional per-API `axios` instances; see {@link Session#createClient}.
@@ -877,6 +957,20 @@ declare class Client extends HttpClient {
      * @returns {@link EventResource} for the Query API.
      */
     get events(): EventResource;
+    /**
+     * Webhook endpoint management for a tenant (create, list, patch, delete, test delivery).
+     *
+     * All methods require `tenantId` explicitly; resolve it once via `client.tenant.verifyCredentials()`.
+     *
+     * @returns {@link WebhookResource} for the Query API.
+     */
+    get webhooks(): WebhookResource;
+    /**
+     * Tenant quota configuration (get and upsert numeric caps).
+     *
+     * @returns {@link QuotaResource} for the Query API.
+     */
+    get quotas(): QuotaResource;
     /**
      * Flushes the event ingestion buffer (best-effort), then shuts down the batch scheduler.
      * Call this on process shutdown so queued events are not lost.
@@ -4225,4 +4319,4 @@ type WorkflowActionSignalEvent = z.infer<typeof WorkflowActionSignalSchema>;
  */
 declare const createWorkflowActionEvent: (event: WorkflowActionSignalEvent) => RawEventRequest;
 
-export { type APIErrorDetail, API_REGISTRY, type AdvisoryListResponse, type AdvisoryResponse, type AdvisorySeverity, type AdvisoryType, type AnomalyFlagSignalEvent, type ApiCallSignalEvent, type AuthSignalEvent, type BaseEvent, type BatchEventResponse, type BehaviorSignalEvent, type ContextIntegritySignalEvent, type EntityType, type EntityTypeLowerCase, type EventAcknowledgement, type EventError, type EventResourceOptions, type ExplainResponse, type ExplanationTrace, type ListAdvisoriesOptions, type ModelOutputSignalEvent, type NetworkSignalEvent, type PolicyEventSignalEvent, type PromptInputSignalEvent, QatiAPIError, QatiAuthError, QatiConfigError, type QatiConfigInput, type QatiConfigOutput, QatiNotFoundError, QatiRateLimitError, QatiSDKError, QatiServerError, type RagRetrievalSignalEvent, type RawEventRequest, RawEventRequestSchema, type RecommendedAction, Session, type SessionSignalEvent, type SystemTelemetrySignalEvent, type ToolCallSignalEvent, type TopContributor, type TransactionSignalEvent, type TrustState, type TrustStateOptions, type UserFeedbackSignalEvent, type VerifyCredentialsResponse, type WorkflowActionSignalEvent, baseUrlFor, createAnomalyFlagEvent, createApiCallEvent, createAuthEvent, createBehaviorEvent, createContextIntegrityEvent, createModelOutputEvent, createNetworkEvent, createPolicyEvent, createPromptInputEvent, createRagRetrievalEvent, createSessionEvent, createSystemTelemetryEvent, createToolCallEvent, createTransactionEvent, createUserFeedbackEvent, createWorkflowActionEvent, parseQatiConfig, resolveQatiConfig };
+export { type APIErrorDetail, API_REGISTRY, type AdvisoryListResponse, type AdvisoryResponse, type AdvisorySeverity, type AdvisoryType, type AnomalyFlagSignalEvent, type ApiCallSignalEvent, type AuthSignalEvent, type BaseEvent, type BatchEventResponse, type BehaviorSignalEvent, type ContextIntegritySignalEvent, type EntityType, type EntityTypeLowerCase, type EventAcknowledgement, type EventError, type EventResourceOptions, type ExplainResponse, type ExplanationTrace, type ListAdvisoriesOptions, type ModelOutputSignalEvent, type NetworkSignalEvent, type PolicyEventSignalEvent, type PromptInputSignalEvent, QatiAPIError, QatiAuthError, QatiConfigError, type QatiConfigInput, type QatiConfigOutput, QatiNotFoundError, QatiRateLimitError, QatiSDKError, QatiServerError, type QuotaResponse, type QuotaUpdateRequest, type RagRetrievalSignalEvent, type RawEventRequest, RawEventRequestSchema, type RecommendedAction, Session, type SessionSignalEvent, type SystemTelemetrySignalEvent, type ToolCallSignalEvent, type TopContributor, type TransactionSignalEvent, type TrustState, type TrustStateOptions, type UserFeedbackSignalEvent, type VerifyCredentialsResponse, type WebhookCreateRequest, type WebhookCreateResponse, type WebhookEventEnvelope, type WebhookPatchRequest, type WebhookResponse, type WebhookTestDeliveryResponse, type WorkflowActionSignalEvent, baseUrlFor, createAnomalyFlagEvent, createApiCallEvent, createAuthEvent, createBehaviorEvent, createContextIntegrityEvent, createModelOutputEvent, createNetworkEvent, createPolicyEvent, createPromptInputEvent, createRagRetrievalEvent, createSessionEvent, createSystemTelemetryEvent, createToolCallEvent, createTransactionEvent, createUserFeedbackEvent, createWorkflowActionEvent, parseQatiConfig, resolveQatiConfig };

package/dist/index.d.ts

@@ -701,6 +701,27 @@ declare class ExplainResource {
     get(entityKey: string, atTimestamp?: Date | string, topDominantNeighbors?: number, topEvents?: number): Promise<ExplainResponse>;
 }
 
+type QuotaUpdateRequest = {
+    max_tracked_entities: number;
+    max_monthly_events: number;
+    max_events_per_second: number;
+};
+type QuotaResponse = {
+    id: string;
+    tenant_id: string;
+    max_tracked_entities: number;
+    max_monthly_events: number;
+    max_events_per_second: number;
+};
+
+declare class QuotaResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    get(tenantId: string): Promise<QuotaResponse>;
+    upsert(tenantId: string, body: QuotaUpdateRequest): Promise<QuotaResponse>;
+}
+
 /**
  * Response body for `GET /v1/tenants/verify-credentials` (Query API).
  */
@@ -822,6 +843,63 @@ declare class TrustStateResource {
     getTrustStates(entityType: EntityTypeLowerCase, entityIds: readonly string[], options?: TrustStateOptions): Promise<TrustState[]>;
 }
 
+type WebhookCreateRequest = {
+    url: string;
+    subscribed_event_types?: string[];
+    enabled?: boolean;
+};
+type WebhookCreateResponse = {
+    id: string;
+    tenant_id: string;
+    url: string;
+    subscribed_event_types: string[];
+    enabled: boolean;
+    secret: string;
+    created_at: string;
+};
+type WebhookResponse = {
+    id: string;
+    tenant_id: string;
+    url: string;
+    subscribed_event_types: string[];
+    enabled: boolean;
+    consecutive_failures: number;
+    disabled_at: string | null;
+    created_at: string;
+    updated_at: string;
+    new_secret?: string | null;
+};
+type WebhookPatchRequest = {
+    url?: string;
+    subscribed_event_types?: string[];
+    enabled?: boolean;
+    rotate_secret?: boolean;
+};
+type WebhookTestDeliveryResponse = {
+    delivery_id: string;
+};
+type WebhookEventEnvelope = {
+    /** Delivery id; also present in the X-QATI-Event-Id request header. */
+    id: string;
+    /** Registered webhook endpoint id. */
+    webhook_id: string;
+    type: string;
+    tenant_id: string;
+    triggered_at: string;
+    data: TrustState | AdvisoryResponse;
+};
+
+declare class WebhookResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    list(tenantId: string): Promise<WebhookResponse[]>;
+    create(tenantId: string, body: WebhookCreateRequest): Promise<WebhookCreateResponse>;
+    patch(tenantId: string, webhookId: string, body: WebhookPatchRequest): Promise<WebhookResponse>;
+    delete(tenantId: string, webhookId: string): Promise<void>;
+    test(tenantId: string, webhookId: string): Promise<WebhookTestDeliveryResponse>;
+}
+
 /**
  * High-level QATI API client: namespaces for tenant, trust state, advisories, explain, and batched event ingestion.
  *
@@ -841,6 +919,8 @@ declare class Client extends HttpClient {
     private readonly _advisory;
     private readonly _explain;
     private readonly _events;
+    private readonly _webhooks;
+    private readonly _quotas;
     /**
      * @param config - Resolved SDK configuration (typically `session.config`).
      * @param axiosInstances - Optional per-API `axios` instances; see {@link Session#createClient}.
@@ -877,6 +957,20 @@ declare class Client extends HttpClient {
      * @returns {@link EventResource} for the Query API.
      */
     get events(): EventResource;
+    /**
+     * Webhook endpoint management for a tenant (create, list, patch, delete, test delivery).
+     *
+     * All methods require `tenantId` explicitly; resolve it once via `client.tenant.verifyCredentials()`.
+     *
+     * @returns {@link WebhookResource} for the Query API.
+     */
+    get webhooks(): WebhookResource;
+    /**
+     * Tenant quota configuration (get and upsert numeric caps).
+     *
+     * @returns {@link QuotaResource} for the Query API.
+     */
+    get quotas(): QuotaResource;
     /**
      * Flushes the event ingestion buffer (best-effort), then shuts down the batch scheduler.
      * Call this on process shutdown so queued events are not lost.
@@ -4225,4 +4319,4 @@ type WorkflowActionSignalEvent = z.infer<typeof WorkflowActionSignalSchema>;
  */
 declare const createWorkflowActionEvent: (event: WorkflowActionSignalEvent) => RawEventRequest;
 
-export { type APIErrorDetail, API_REGISTRY, type AdvisoryListResponse, type AdvisoryResponse, type AdvisorySeverity, type AdvisoryType, type AnomalyFlagSignalEvent, type ApiCallSignalEvent, type AuthSignalEvent, type BaseEvent, type BatchEventResponse, type BehaviorSignalEvent, type ContextIntegritySignalEvent, type EntityType, type EntityTypeLowerCase, type EventAcknowledgement, type EventError, type EventResourceOptions, type ExplainResponse, type ExplanationTrace, type ListAdvisoriesOptions, type ModelOutputSignalEvent, type NetworkSignalEvent, type PolicyEventSignalEvent, type PromptInputSignalEvent, QatiAPIError, QatiAuthError, QatiConfigError, type QatiConfigInput, type QatiConfigOutput, QatiNotFoundError, QatiRateLimitError, QatiSDKError, QatiServerError, type RagRetrievalSignalEvent, type RawEventRequest, RawEventRequestSchema, type RecommendedAction, Session, type SessionSignalEvent, type SystemTelemetrySignalEvent, type ToolCallSignalEvent, type TopContributor, type TransactionSignalEvent, type TrustState, type TrustStateOptions, type UserFeedbackSignalEvent, type VerifyCredentialsResponse, type WorkflowActionSignalEvent, baseUrlFor, createAnomalyFlagEvent, createApiCallEvent, createAuthEvent, createBehaviorEvent, createContextIntegrityEvent, createModelOutputEvent, createNetworkEvent, createPolicyEvent, createPromptInputEvent, createRagRetrievalEvent, createSessionEvent, createSystemTelemetryEvent, createToolCallEvent, createTransactionEvent, createUserFeedbackEvent, createWorkflowActionEvent, parseQatiConfig, resolveQatiConfig };
+export { type APIErrorDetail, API_REGISTRY, type AdvisoryListResponse, type AdvisoryResponse, type AdvisorySeverity, type AdvisoryType, type AnomalyFlagSignalEvent, type ApiCallSignalEvent, type AuthSignalEvent, type BaseEvent, type BatchEventResponse, type BehaviorSignalEvent, type ContextIntegritySignalEvent, type EntityType, type EntityTypeLowerCase, type EventAcknowledgement, type EventError, type EventResourceOptions, type ExplainResponse, type ExplanationTrace, type ListAdvisoriesOptions, type ModelOutputSignalEvent, type NetworkSignalEvent, type PolicyEventSignalEvent, type PromptInputSignalEvent, QatiAPIError, QatiAuthError, QatiConfigError, type QatiConfigInput, type QatiConfigOutput, QatiNotFoundError, QatiRateLimitError, QatiSDKError, QatiServerError, type QuotaResponse, type QuotaUpdateRequest, type RagRetrievalSignalEvent, type RawEventRequest, RawEventRequestSchema, type RecommendedAction, Session, type SessionSignalEvent, type SystemTelemetrySignalEvent, type ToolCallSignalEvent, type TopContributor, type TransactionSignalEvent, type TrustState, type TrustStateOptions, type UserFeedbackSignalEvent, type VerifyCredentialsResponse, type WebhookCreateRequest, type WebhookCreateResponse, type WebhookEventEnvelope, type WebhookPatchRequest, type WebhookResponse, type WebhookTestDeliveryResponse, type WorkflowActionSignalEvent, baseUrlFor, createAnomalyFlagEvent, createApiCallEvent, createAuthEvent, createBehaviorEvent, createContextIntegrityEvent, createModelOutputEvent, createNetworkEvent, createPolicyEvent, createPromptInputEvent, createRagRetrievalEvent, createSessionEvent, createSystemTelemetryEvent, createToolCallEvent, createTransactionEvent, createUserFeedbackEvent, createWorkflowActionEvent, parseQatiConfig, resolveQatiConfig };

package/dist/index.js

@@ -72,19 +72,6 @@ var QatiConfigError = class extends QatiSDKError {
 };
 
 // src/config.ts
-var EV_VARIABLES_NAMES = [
-  "QATI_TENANT_API_KEY",
-  "QATI_QUERY_API_BASE_URL",
-  "QATI_INGESTION_API_BASE_URL",
-  "QATI_TIMEOUT",
-  "QATI_MAX_RETRIES",
-  "QATI_INGESTION_BATCH_SIZE",
-  "QATI_INGESTION_FLUSH_INTERVAL_SECONDS",
-  "QATI_RETRY_BACKOFF_INITIAL_SECONDS",
-  "QATI_RETRY_BACKOFF_MAX_SECONDS",
-  "QATI_RETRY_JITTER_FRACTION",
-  "QATI_MAX_RETRIES"
-];
 var API_REGISTRY = {
   query_api: "queryApiBaseUrl",
   ingestion_api: "ingestionApiBaseUrl"
@@ -109,14 +96,22 @@ var stripUndefined = (obj) => {
 };
 var readEnvOverrides = () => {
   const e = process.env;
-  const sanitizedEnvs = EV_VARIABLES_NAMES.reduce(
-    (acc, ev) => {
-      acc[ev] = e[ev];
-      return acc;
-    },
-    {}
-  );
-  return sanitizedEnvs;
+  const num = (key) => {
+    const v = e[key];
+    return v !== void 0 ? Number(v) : void 0;
+  };
+  return {
+    tenantApiKey: e["QATI_TENANT_API_KEY"],
+    queryApiBaseUrl: e["QATI_QUERY_API_BASE_URL"],
+    ingestionApiBaseUrl: e["QATI_INGESTION_API_BASE_URL"],
+    timeout: num("QATI_TIMEOUT"),
+    maxRetries: num("QATI_MAX_RETRIES"),
+    ingestionBatchSize: num("QATI_INGESTION_BATCH_SIZE"),
+    ingestionFlushIntervalSeconds: num("QATI_INGESTION_FLUSH_INTERVAL_SECONDS"),
+    retryBackoffInitialSeconds: num("QATI_RETRY_BACKOFF_INITIAL_SECONDS"),
+    retryBackoffMaxSeconds: num("QATI_RETRY_BACKOFF_MAX_SECONDS"),
+    retryJitterFraction: num("QATI_RETRY_JITTER_FRACTION")
+  };
 };
 var resolveQatiConfig = (input) => {
   config({ path: ".env" });
@@ -601,6 +596,29 @@ var ExplainResource = class {
   }
 };
 
+// src/resources/quota-resource.ts
+var QuotaResource = class {
+  constructor(_http) {
+    this._http = _http;
+  }
+  _http;
+  apiName = "query_api";
+  async get(tenantId) {
+    return this._http.request(
+      "GET",
+      `/v1/tenants/${encodeURIComponent(tenantId)}/quotas`,
+      { api_name: this.apiName }
+    );
+  }
+  async upsert(tenantId, body) {
+    return this._http.request(
+      "PUT",
+      `/v1/tenants/${encodeURIComponent(tenantId)}/quotas`,
+      { api_name: this.apiName, data: body }
+    );
+  }
+};
+
 // src/resources/tenant-resource.ts
 var TenantResource = class {
   constructor(_http) {
@@ -674,6 +692,50 @@ var TrustStateResource = class {
   }
 };
 
+// src/resources/webhook-resource.ts
+var WebhookResource = class {
+  constructor(_http) {
+    this._http = _http;
+  }
+  _http;
+  apiName = "query_api";
+  async list(tenantId) {
+    return this._http.request(
+      "GET",
+      `/v1/tenants/${encodeURIComponent(tenantId)}/webhooks`,
+      { api_name: this.apiName }
+    );
+  }
+  async create(tenantId, body) {
+    return this._http.request(
+      "POST",
+      `/v1/tenants/${encodeURIComponent(tenantId)}/webhooks`,
+      { api_name: this.apiName, data: body }
+    );
+  }
+  async patch(tenantId, webhookId, body) {
+    return this._http.request(
+      "PATCH",
+      `/v1/tenants/${encodeURIComponent(tenantId)}/webhooks/${encodeURIComponent(webhookId)}`,
+      { api_name: this.apiName, data: body }
+    );
+  }
+  async delete(tenantId, webhookId) {
+    const instance = this._http.getClient(this.apiName);
+    await instance.request({
+      method: "DELETE",
+      url: `/v1/tenants/${encodeURIComponent(tenantId)}/webhooks/${encodeURIComponent(webhookId)}`
+    });
+  }
+  async test(tenantId, webhookId) {
+    return this._http.request(
+      "POST",
+      `/v1/tenants/${encodeURIComponent(tenantId)}/webhooks/${encodeURIComponent(webhookId)}/test`,
+      { api_name: this.apiName }
+    );
+  }
+};
+
 // src/client/client.ts
 var Client = class extends HttpClient {
   _tenant;
@@ -681,6 +743,8 @@ var Client = class extends HttpClient {
   _advisory;
   _explain;
   _events;
+  _webhooks;
+  _quotas;
   /**
    * @param config - Resolved SDK configuration (typically `session.config`).
    * @param axiosInstances - Optional per-API `axios` instances; see {@link Session#createClient}.
@@ -693,6 +757,8 @@ var Client = class extends HttpClient {
     this._advisory = new AdvisoryResource(this);
     this._explain = new ExplainResource(this);
     this._events = new EventResource(this);
+    this._webhooks = new WebhookResource(this);
+    this._quotas = new QuotaResource(this);
   }
   /**
    * Tenant API surface (credentials verification).
@@ -734,6 +800,24 @@ var Client = class extends HttpClient {
   get events() {
     return this._events;
   }
+  /**
+   * Webhook endpoint management for a tenant (create, list, patch, delete, test delivery).
+   *
+   * All methods require `tenantId` explicitly; resolve it once via `client.tenant.verifyCredentials()`.
+   *
+   * @returns {@link WebhookResource} for the Query API.
+   */
+  get webhooks() {
+    return this._webhooks;
+  }
+  /**
+   * Tenant quota configuration (get and upsert numeric caps).
+   *
+   * @returns {@link QuotaResource} for the Query API.
+   */
+  get quotas() {
+    return this._quotas;
+  }
   /**
    * Flushes the event ingestion buffer (best-effort), then shuts down the batch scheduler.
    * Call this on process shutdown so queued events are not lost.