@agentforge-io/sdk-server 4.5.1 → 4.5.3

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { AgentForgeClient } from './client';
 export type { AgentForgeClientOptions, RequestOptions } from './client';
 export { AgentForgeError, AgentForgeAuthError, AgentForgeNotFoundError, AgentForgeNetworkError, } from './errors';
 export { TOOL_CALLBACK_HEADERS, ToolCallbackSignatureError, signToolCallbackPayload, verifyToolCallbackSignature, } from './webhooks';
-export type { AgentMe, AgentSummary, AppUserConnectorStatus, ApprovalCopyBundle, ChatStreamChunk, ChatStreamEvent, ChatTokenRecord, ConnectorDefaultsResult, ConnectorDefaultsSource, ConnectorResourceItem, ConnectorStatus, ConnectorToolInfo, ConversationHistory, ConversationStatus, CreateAgentInput, CreateClickupTaskInput, CreateClickupTaskResult, ExternalToolSummary, IssueChatTokenInput, ListAgentsResult, ListConnectorResourcesResult, McpServerConfig, MessageRecord, MessageRole, PublicAppBranding, AppSelf, AppSelfConnector, AppSelfConnectors, RegisterToolInput, RegisterToolsInput, RegisterToolsResult, ToolCallbackPayload, ToolCallRecord, ToolPermission, ToolPermissionMode, TokenUsage, TenantSecretEntry, UpdateAgentInput, } from './types';
+export type { AgentMe, AgentSummary, AppUserConnectorStatus, ApprovalCopyBundle, ChannelContext, ChatStreamChunk, ChatStreamEvent, ChatTokenRecord, ConnectorDefaultsResult, ConnectorDefaultsSource, ConnectorResourceItem, ConnectorStatus, ConnectorToolInfo, ConversationHistory, ConversationStatus, CreateAgentInput, CreateClickupTaskInput, CreateClickupTaskResult, ExternalToolSummary, IssueChatTokenInput, ListAgentsResult, ListConnectorResourcesResult, McpServerConfig, MessageRecord, MessageRole, PublicAppBranding, AppSelf, AppSelfConnector, AppSelfConnectors, AppSelfConnectorTools, AppSelfConnectorToolsResponse, RegisterToolInput, RegisterToolsInput, RegisterToolsResult, ToolCallbackPayload, ToolCallRecord, ToolPermission, ToolPermissionMode, TokenUsage, TenantSecretEntry, UpdateAgentInput, } from './types';
 export { AgentsResource } from './resources/agents';
 export { AppsResource } from './resources/apps';
 export { ChatResource } from './resources/chat';
@@ -10,7 +10,7 @@ export type { AnthropicClientOptions, StreamMessageInput } from './resources/cha
 export { ConnectorsResource } from './resources/connectors';
 export type { InboxChannelView } from './resources/connectors';
 export { ProvisioningResource } from './resources/provisioning';
-export type { ProvisionedTenant, ProvisionedApp, } from './resources/provisioning';
+export type { ProvisionedTenant, ProvisionedApp, ProvisionedTeam, } from './resources/provisioning';
 export { SecretsResource } from './resources/secrets';
 export { ToolsResource } from './resources/tools';
 export type { RespondToCallbackInput, VerifyCallbackInput } from './resources/tools';

package/dist/resources/apps.d.ts

@@ -1,5 +1,5 @@
 import type { AgentForgeClient } from '../client';
-import type { PublicAppBranding, AppSelf, AppSelfConnectors } from '../types';
+import type { PublicAppBranding, AppSelf, AppSelfConnectors, AppSelfConnectorToolsResponse } from '../types';
 export declare class AppsResource {
     private readonly client;
     constructor(client: AgentForgeClient);
@@ -41,5 +41,22 @@ export declare class AppsResource {
          * by the App at runtime.
          */
         list: () => Promise<AppSelfConnectors>;
+        /**
+         * `GET /apps/me/connector-tools` (AGF-CTG-1) — flat tool-name catalog
+         * contributed by the connectors ENABLED for the App this client
+         * authenticated AS. App-level granularity ONLY: this is NOT narrowed
+         * per-end-user — that narrowing already happens downstream at runtime
+         * via `toolsForAppUser ∩ agent.tools[]`.
+         *
+         * Intended for a consumer bootstrap to DERIVE its connector-tool
+         * whitelist from the App's actually-enabled connectors instead of
+         * hardcoding tool names by hand — the top-level `toolNames` is the
+         * flat, de-duplicated union across every enabled connector.
+         *
+         * @example
+         *   const { toolNames } = await af.apps.connectors.tools();
+         *   const allowed = new Set(toolNames);
+         */
+        tools: () => Promise<AppSelfConnectorToolsResponse>;
     };
 }

package/dist/resources/apps.js

@@ -35,6 +35,25 @@ class AppsResource {
             list: async () => {
                 return this.client.request('GET', '/apps/me/connectors');
             },
+            /**
+             * `GET /apps/me/connector-tools` (AGF-CTG-1) — flat tool-name catalog
+             * contributed by the connectors ENABLED for the App this client
+             * authenticated AS. App-level granularity ONLY: this is NOT narrowed
+             * per-end-user — that narrowing already happens downstream at runtime
+             * via `toolsForAppUser ∩ agent.tools[]`.
+             *
+             * Intended for a consumer bootstrap to DERIVE its connector-tool
+             * whitelist from the App's actually-enabled connectors instead of
+             * hardcoding tool names by hand — the top-level `toolNames` is the
+             * flat, de-duplicated union across every enabled connector.
+             *
+             * @example
+             *   const { toolNames } = await af.apps.connectors.tools();
+             *   const allowed = new Set(toolNames);
+             */
+            tools: async () => {
+                return this.client.request('GET', '/apps/me/connector-tools');
+            },
         };
     }
     /**

package/dist/resources/chat.d.ts

@@ -1,5 +1,5 @@
 import type { AgentForgeClient } from '../client';
-import type { ChatStreamEvent, ConversationHistory } from '../types';
+import type { ChannelContext, ChatStreamEvent, ConversationHistory } from '../types';
 export interface AnthropicClientOptions {
     /** Override de la versión Anthropic. Default: '2023-06-01'. */
     anthropicVersion?: string;
@@ -8,6 +8,15 @@ export interface StreamMessageInput {
     content: string;
     /** Si se omite, el server crea una conversación nueva. */
     conversationId?: string;
+    /**
+     * AGF-CHANNEL-CTX PR-2 — which surface this turn is coming through (and
+     * who's on the other end). Threads through to the platform's
+     * `AgentOverrides.channel` (core), which `resolvePresentationPolicy`
+     * consumes to decide whether `OutputSanitizerService` runs this turn.
+     * Omit for legacy callers — the resolved policy defaults to `'strict'`
+     * (today's behavior), zero regression.
+     */
+    channel?: ChannelContext;
 }
 export interface StreamMessageForAppUserInput {
     /** Which of the App's tenant agents to run. */
@@ -22,6 +31,17 @@ export interface StreamMessageForAppUserInput {
     content: string;
     /** Si se omite, el server crea una conversación nueva. */
     conversationId?: string;
+    /**
+     * AGF-CHANNEL-CTX PR-2 — which surface this turn is coming through (and
+     * who's on the other end). Threads through to the platform's
+     * `AgentOverrides.channel` (core), which `resolvePresentationPolicy`
+     * consumes to decide whether `OutputSanitizerService` runs this turn.
+     * Omit for legacy callers — the resolved policy defaults to `'strict'`
+     * (today's behavior), zero regression. ScrappyDoc's SOP Architect
+     * Composer (PR-3) declares `{ id: 'app-operator', audience: 'operator' }`
+     * here to turn the sanitizer OFF for this operator-facing surface.
+     */
+    channel?: ChannelContext;
 }
 export declare class ChatResource {
     private readonly client;

package/dist/resources/chat.js

@@ -70,6 +70,7 @@ class ChatResource {
         const res = await this.client.requestStream('POST', '/api/v1/chat/messages/stream', {
             content: input.content,
             ...(input.conversationId ? { conversationId: input.conversationId } : {}),
+            ...(input.channel ? { channel: input.channel } : {}),
         });
         if (!res.body) {
             throw new Error('chat.streamMessage: response has no readable body');
@@ -147,6 +148,7 @@ class ChatResource {
             agentId: input.agentId,
             externalUserId: input.externalUserId,
             content: input.content,
+            ...(input.channel ? { channel: input.channel } : {}),
         });
         if (!res.body) {
             throw new Error('chat.streamMessageForAppUser: response has no readable body');

package/dist/resources/provisioning.d.ts

@@ -11,6 +11,14 @@ export interface ProvisionedApp {
     publicKey: string;
     appSecret: string;
 }
+/** `POST /platform/host-teams` result — a team-orchestrator's identity
+ *  (AGF-SD-6a). No secret to reveal here (unlike `tenant()`/`app()`) — a
+ *  team has no credential of its own, it's addressed through the
+ *  tenant's `ak_live_` / App's `sk_live_`. */
+export interface ProvisionedTeam {
+    teamId: string;
+    orchestratorAgentId: string;
+}
 export declare class ProvisioningResource {
     private readonly client;
     constructor(client: AgentForgeClient);
@@ -49,4 +57,27 @@ export declare class ProvisioningResource {
         hostApp: string;
         hostRef?: string;
     }): Promise<ProvisionedApp>;
+    /**
+     * `POST /platform/host-teams` (AGF-SD-6a) — find-or-create a
+     * team-orchestrator for an EXISTING tenant on behalf of a trusted host
+     * app. Idempotent by `(tenantId, hostRef)`: a re-provision returns the
+     * SAME `teamId`/`orchestratorAgentId`, never a duplicate orchestrator.
+     *
+     * @param input.tenantId the tenant the team belongs to (host provisions
+     *                        it first via `tenant()`)
+     * @param input.hostApp   short host id (e.g. "scrappydoc") — recorded
+     *                        for parity with `tenant()`/`app()`, not part of
+     *                        the idempotency key here (a team already lives
+     *                        under one tenant, so `(tenantId, hostRef)`
+     *                        alone is unambiguous)
+     * @param input.hostRef   host reference (e.g. the workspaceId) — the
+     *                        idempotency key together with `tenantId`
+     * @param input.name      display name, only used on first provision
+     */
+    team(input: {
+        tenantId: string;
+        hostApp: string;
+        hostRef: string;
+        name?: string;
+    }): Promise<ProvisionedTeam>;
 }

package/dist/resources/provisioning.js

@@ -51,5 +51,30 @@ class ProvisioningResource {
     async app(input) {
         return this.client.request('POST', '/platform/host-apps', { tenantId: input.tenantId, hostApp: input.hostApp, hostRef: input.hostRef }, { headers: this.headers() });
     }
+    /**
+     * `POST /platform/host-teams` (AGF-SD-6a) — find-or-create a
+     * team-orchestrator for an EXISTING tenant on behalf of a trusted host
+     * app. Idempotent by `(tenantId, hostRef)`: a re-provision returns the
+     * SAME `teamId`/`orchestratorAgentId`, never a duplicate orchestrator.
+     *
+     * @param input.tenantId the tenant the team belongs to (host provisions
+     *                        it first via `tenant()`)
+     * @param input.hostApp   short host id (e.g. "scrappydoc") — recorded
+     *                        for parity with `tenant()`/`app()`, not part of
+     *                        the idempotency key here (a team already lives
+     *                        under one tenant, so `(tenantId, hostRef)`
+     *                        alone is unambiguous)
+     * @param input.hostRef   host reference (e.g. the workspaceId) — the
+     *                        idempotency key together with `tenantId`
+     * @param input.name      display name, only used on first provision
+     */
+    async team(input) {
+        return this.client.request('POST', '/platform/host-teams', {
+            tenantId: input.tenantId,
+            hostApp: input.hostApp,
+            hostRef: input.hostRef,
+            name: input.name,
+        }, { headers: this.headers() });
+    }
 }
 exports.ProvisioningResource = ProvisioningResource;

package/dist/types.d.ts

@@ -84,6 +84,16 @@ export interface AppSelfConnectors {
     mode: 'whitelist' | 'legacy';
     connectors: AppSelfConnector[];
 }
+export interface AppSelfConnectorTools {
+    connectorId: string;
+    toolNames: string[];
+}
+export interface AppSelfConnectorToolsResponse {
+    connectors: AppSelfConnectorTools[];
+    /** Flat, de-duplicated union of every `toolNames` entry above — this is
+     *  what a whitelist consumer actually wants. */
+    toolNames: string[];
+}
 export interface RegisterToolInput {
     name: string;
     description: string;
@@ -362,6 +372,17 @@ export type ChatStreamEvent = {
     kind: 'error';
     message: string;
 };
+export interface ChannelContext {
+    /** Stable channel id. Open enum — hosts pass their own; core only
+     *  special-cases the ones it ships a default for via `audience`/`sanitize`. */
+    id: 'whatsapp' | 'voice' | 'app-operator' | 'public' | 'b2b-console' | (string & {});
+    /** Who is on the other end. Drives the DEFAULT presentation policy when
+     *  `sanitize` isn't set explicitly. */
+    audience?: 'customer' | 'operator' | 'internal';
+    /** Optional explicit override of the derived policy (escape hatch). Wins
+     *  over `audience` when present. */
+    sanitize?: 'strict' | 'voice' | 'off';
+}
 export interface ConnectorStatus {
     connectorId: string;
     /** ¿El tenant ya completó el OAuth/API-key setup de este connector? */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentforge-io/sdk-server",
-  "version": "4.5.1",
+  "version": "4.5.3",
   "description": "Server-side SDK for backend apps integrating with AgentForge platform. Auth via ChatToken or ak_live_ API key.",
   "license": "MIT",
   "main": "dist/index.js",