@agentforge-io/sdk-server 4.7.0 → 4.9.0

package/dist/client.d.ts

@@ -4,9 +4,12 @@ import { AppsResource } from './resources/apps';
 import { ChatResource } from './resources/chat';
 import { ConnectorsResource } from './resources/connectors';
 import { InboxResource } from './resources/inbox';
+import { InstallationsResource } from './resources/installations';
 import { ProvisioningResource } from './resources/provisioning';
 import { SecretsResource } from './resources/secrets';
 import { TeamsResource } from './resources/teams';
+import { TemplatesResource } from './resources/templates';
+import { TenantConfigResource } from './resources/config';
 import { ToolsResource } from './resources/tools';
 export interface AgentForgeClientOptions {
     /** Platform base URL — e.g. http://localhost:3032 in dev. */
@@ -29,6 +32,11 @@ export interface AgentForgeClientOptions {
      *  travels on the `x-provisioning-secret` header, never `Authorization`. A
      *  client built with only this can ONLY call the provisioning surface. */
     provisioningSecret?: string;
+    /** Tenant to act in when the App is installed there (App installations,
+     *  AGF-096v). Requires `appSecret`; sent as `x-af-tenant`. Usually set via
+     *  `af.forTenant(tenantId)` rather than by hand. Omit to act in the App's
+     *  own tenant. */
+    tenantId?: string;
     /** Override fetch (for testing or custom transports). */
     fetch?: typeof fetch;
     /** Default request timeout in ms. Applied to every HTTP call unless
@@ -52,8 +60,13 @@ export interface RequestOptions {
      *  run long. Defaults to the client's `timeoutMs`. */
     timeoutMs?: number | null;
 }
+/** Header that selects an installed tenant for an App secret. */
+export declare const INSTALLED_TENANT_HEADER = "x-af-tenant";
 export declare class AgentForgeClient {
     readonly baseURL: string;
+    /** Installed tenant this client acts in (`forTenant`), if any. */
+    readonly tenantId?: string;
+    private readonly options;
     private readonly chatToken?;
     private readonly apiKey?;
     private readonly appSecret?;
@@ -66,11 +79,24 @@ export declare class AgentForgeClient {
     readonly chat: ChatResource;
     readonly connectors: ConnectorsResource;
     readonly inbox: InboxResource;
+    readonly installations: InstallationsResource;
     readonly provisioning: ProvisioningResource;
     readonly secrets: SecretsResource;
     readonly tools: ToolsResource;
     readonly teams: TeamsResource;
+    readonly templates: TemplatesResource;
+    readonly config: TenantConfigResource;
     constructor(opts: AgentForgeClientOptions);
+    /**
+     * A client that acts inside `tenantId`, a tenant where this App is
+     * installed (`af.installations.install`). Same App secret, same App
+     * identity; every call carries `x-af-tenant`. Only the App secret is
+     * kept — a chat token or `ak_live_` never crosses tenants.
+     *
+     *   const owner = af.forTenant(installation.tenantId);
+     *   await owner.templates.install(templateId, { name: 'Café Azul' });
+     */
+    forTenant(tenantId: string): AgentForgeClient;
     authHeaders(): Record<string, string>;
     getAppSecret(): string | undefined;
     /** The `x-provisioning-secret` header value, or throws if the client wasn't

package/dist/client.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentForgeClient = void 0;
+exports.AgentForgeClient = exports.INSTALLED_TENANT_HEADER = void 0;
 // AgentForgeClient — punto de entrada del SDK.
 //
 // Uso:
@@ -26,10 +26,15 @@ const apps_1 = require("./resources/apps");
 const chat_1 = require("./resources/chat");
 const connectors_1 = require("./resources/connectors");
 const inbox_1 = require("./resources/inbox");
+const installations_1 = require("./resources/installations");
 const provisioning_1 = require("./resources/provisioning");
 const secrets_1 = require("./resources/secrets");
 const teams_1 = require("./resources/teams");
+const templates_1 = require("./resources/templates");
+const config_1 = require("./resources/config");
 const tools_1 = require("./resources/tools");
+/** Header that selects an installed tenant for an App secret. */
+exports.INSTALLED_TENANT_HEADER = 'x-af-tenant';
 class AgentForgeClient {
     constructor(opts) {
         if (!opts.baseURL) {
@@ -42,6 +47,11 @@ class AgentForgeClient {
             throw new Error('AgentForgeClient: one of chatToken, apiKey, appSecret, or ' +
                 'provisioningSecret is required');
         }
+        if (opts.tenantId !== undefined && (!opts.appSecret || !opts.tenantId.trim())) {
+            throw new Error('AgentForgeClient: tenantId needs an appSecret (sk_live_/sk_test_) and a non-empty id');
+        }
+        this.options = opts;
+        this.tenantId = opts.tenantId?.trim();
         this.baseURL = opts.baseURL.replace(/\/$/, '');
         this.chatToken = opts.chatToken;
         this.apiKey = opts.apiKey;
@@ -55,10 +65,34 @@ class AgentForgeClient {
         this.chat = new chat_1.ChatResource(this);
         this.connectors = new connectors_1.ConnectorsResource(this);
         this.inbox = new inbox_1.InboxResource(this);
+        this.installations = new installations_1.InstallationsResource(this);
         this.provisioning = new provisioning_1.ProvisioningResource(this);
         this.secrets = new secrets_1.SecretsResource(this);
         this.tools = new tools_1.ToolsResource(this);
         this.teams = new teams_1.TeamsResource(this);
+        this.templates = new templates_1.TemplatesResource(this);
+        this.config = new config_1.TenantConfigResource(this);
+    }
+    /**
+     * A client that acts inside `tenantId`, a tenant where this App is
+     * installed (`af.installations.install`). Same App secret, same App
+     * identity; every call carries `x-af-tenant`. Only the App secret is
+     * kept — a chat token or `ak_live_` never crosses tenants.
+     *
+     *   const owner = af.forTenant(installation.tenantId);
+     *   await owner.templates.install(templateId, { name: 'Café Azul' });
+     */
+    forTenant(tenantId) {
+        if (!this.appSecret) {
+            throw new Error('AgentForgeClient.forTenant: needs a client built with an appSecret');
+        }
+        return new AgentForgeClient({
+            baseURL: this.baseURL,
+            appSecret: this.appSecret,
+            tenantId,
+            fetch: this.options.fetch,
+            timeoutMs: this.options.timeoutMs,
+        });
     }
     // Auth headers derivados del modo. ChatToken gana si ambos están presentes;
     // luego apiKey (ak_live_); luego appSecret (sk_live_) — ambos secrets viajan
@@ -128,6 +162,7 @@ class AgentForgeClient {
                     ...(opts?.rawBody !== undefined ? { 'content-type': 'application/json' } : {}),
                     accept: 'application/json',
                     ...this.resolveAuthHeaders(opts),
+                    ...(this.tenantId ? { [exports.INSTALLED_TENANT_HEADER]: this.tenantId } : {}),
                     ...(opts?.headers ?? {}),
                 },
                 body: opts?.rawBody,

package/dist/index.d.ts

@@ -1,17 +1,22 @@
-export { AgentForgeClient } from './client';
+export { AgentForgeClient, INSTALLED_TENANT_HEADER } from './client';
 export type { AgentForgeClientOptions, RequestOptions } from './client';
 export { AgentForgeError, AgentForgeAuthError, AgentForgeNotFoundError, AgentForgeNetworkError, } from './errors';
 export { TOOL_CALLBACK_HEADERS, ToolCallbackSignatureError, signToolCallbackPayload, verifyToolCallbackSignature, } from './webhooks';
-export type { AgentMe, AgentSummary, AppUserConnectorStatus, ApprovalCopyBundle, ChannelContext, ChatStreamChunk, ChatStreamEvent, ChatTokenRecord, ConnectorDefaultsResult, ConnectorDefaultsSource, ConnectorResourceItem, ConnectorStatus, ConnectorToolInfo, ConversationHistory, ConversationStatus, CreateAgentInput, CreateClickupTaskInput, CreateClickupTaskResult, ExternalToolSummary, IssueChatTokenInput, ListAgentsResult, ListConnectorResourcesResult, McpServerConfig, MessageRecord, MessageRole, PublicAppBranding, PublicProfileBlock, PublicProfileTemplate, PublicTeamLanding, CreateTeamInput, TeamSummary, AppSelf, AppSelfConnector, AppSelfConnectors, AppSelfConnectorTools, AppSelfConnectorToolsResponse, RegisterToolInput, RegisterToolsInput, RegisterToolsResult, ToolCallbackPayload, ToolCallRecord, ToolPermission, ToolPermissionMode, TokenUsage, TenantSecretEntry, UpdateAgentInput, InboxThreadMode, InboxMessageDirection, InboxMessageSource, InboxMessageType, InboxThreadCustomerProfileView, InboxThreadView, InboxMessageView, SupportKpiTotals, SupportKpiResponse, AgentAttentionLogRow, } from './types';
+export type { AgentMe, AgentSummary, AppUserConnectorStatus, ApprovalCopyBundle, ChannelContext, ChatStreamChunk, ChatStreamEvent, ChatTokenRecord, ConnectorDefaultsResult, ConnectorDefaultsSource, ConnectorResourceItem, ConnectorStatus, ConnectorToolInfo, ConversationHistory, ConversationStatus, CreateAgentInput, CreateClickupTaskInput, CreateClickupTaskResult, ExternalToolSummary, IssueChatTokenInput, ListAgentsResult, ListConnectorResourcesResult, McpServerConfig, MessageRecord, MessageRole, PublicAppBranding, PublicProfileBlock, PublicProfileTemplate, PublicTeamLanding, CreateTeamInput, UpdateTeamInput, TeamSummary, AppInstallation, TemplateConfigField, TemplateSummary, TemplateDetail, TemplateInstallResult, TenantConfigEntry, AppSelf, AppSelfConnector, AppSelfConnectors, AppSelfConnectorTools, AppSelfConnectorToolsResponse, RegisterToolInput, RegisterToolsInput, RegisterToolsResult, ToolCallbackPayload, ToolCallRecord, ToolPermission, ToolPermissionMode, TokenUsage, TenantSecretEntry, UpdateAgentInput, InboxThreadMode, InboxMessageDirection, InboxMessageSource, InboxMessageType, InboxThreadCustomerProfileView, InboxThreadView, InboxMessageView, SupportKpiTotals, SupportKpiResponse, AgentAttentionLogRow, } from './types';
 export { AgentsResource } from './resources/agents';
 export { AnalyticsResource } from './resources/analytics';
 export type { GetSupportKpisInput, GetAgentAttentionLogInput, } from './resources/analytics';
 export { AppsResource } from './resources/apps';
 export { ChatResource } from './resources/chat';
-export type { AnthropicClientOptions, StreamMessageInput } from './resources/chat';
+export type { AnthropicClientOptions, AppCallerClaims, StreamMessageInput, StreamMessageForAppUserInput, } from './resources/chat';
 export { ConnectorsResource } from './resources/connectors';
 export type { InboxChannelView } from './resources/connectors';
 export { InboxResource } from './resources/inbox';
+export { InstallationsResource } from './resources/installations';
+export type { InstallAppInput } from './resources/installations';
+export { TemplatesResource } from './resources/templates';
+export type { ListTemplatesInput } from './resources/templates';
+export { TenantConfigResource } from './resources/config';
 export type { ListThreadsOptions, SendMessageInput, AssignThreadInput, UnassignThreadInput, SetThreadModeInput, CloseThreadInput, } from './resources/inbox';
 export { ProvisioningResource } from './resources/provisioning';
 export type { ProvisionedTenant, ProvisionedApp, ProvisionedTeam, } from './resources/provisioning';

package/dist/index.js

@@ -28,9 +28,10 @@
 //   const payload = af.tools.verifyCallback({ rawBody, signatureHeader, secretPlaintext });
 //   await af.tools.respondToCallback({ resultUrl: payload.resultUrl, tenantId: payload.tenantId, secret, result });
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ToolsResource = exports.TeamsResource = exports.SecretsResource = exports.ProvisioningResource = exports.InboxResource = exports.ConnectorsResource = exports.ChatResource = exports.AppsResource = exports.AnalyticsResource = exports.AgentsResource = exports.verifyToolCallbackSignature = exports.signToolCallbackPayload = exports.ToolCallbackSignatureError = exports.TOOL_CALLBACK_HEADERS = exports.AgentForgeNetworkError = exports.AgentForgeNotFoundError = exports.AgentForgeAuthError = exports.AgentForgeError = exports.AgentForgeClient = void 0;
+exports.ToolsResource = exports.TeamsResource = exports.SecretsResource = exports.ProvisioningResource = exports.TenantConfigResource = exports.TemplatesResource = exports.InstallationsResource = exports.InboxResource = exports.ConnectorsResource = exports.ChatResource = exports.AppsResource = exports.AnalyticsResource = exports.AgentsResource = exports.verifyToolCallbackSignature = exports.signToolCallbackPayload = exports.ToolCallbackSignatureError = exports.TOOL_CALLBACK_HEADERS = exports.AgentForgeNetworkError = exports.AgentForgeNotFoundError = exports.AgentForgeAuthError = exports.AgentForgeError = exports.INSTALLED_TENANT_HEADER = exports.AgentForgeClient = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "AgentForgeClient", { enumerable: true, get: function () { return client_1.AgentForgeClient; } });
+Object.defineProperty(exports, "INSTALLED_TENANT_HEADER", { enumerable: true, get: function () { return client_1.INSTALLED_TENANT_HEADER; } });
 var errors_1 = require("./errors");
 Object.defineProperty(exports, "AgentForgeError", { enumerable: true, get: function () { return errors_1.AgentForgeError; } });
 Object.defineProperty(exports, "AgentForgeAuthError", { enumerable: true, get: function () { return errors_1.AgentForgeAuthError; } });
@@ -53,6 +54,12 @@ var connectors_1 = require("./resources/connectors");
 Object.defineProperty(exports, "ConnectorsResource", { enumerable: true, get: function () { return connectors_1.ConnectorsResource; } });
 var inbox_1 = require("./resources/inbox");
 Object.defineProperty(exports, "InboxResource", { enumerable: true, get: function () { return inbox_1.InboxResource; } });
+var installations_1 = require("./resources/installations");
+Object.defineProperty(exports, "InstallationsResource", { enumerable: true, get: function () { return installations_1.InstallationsResource; } });
+var templates_1 = require("./resources/templates");
+Object.defineProperty(exports, "TemplatesResource", { enumerable: true, get: function () { return templates_1.TemplatesResource; } });
+var config_1 = require("./resources/config");
+Object.defineProperty(exports, "TenantConfigResource", { enumerable: true, get: function () { return config_1.TenantConfigResource; } });
 var provisioning_1 = require("./resources/provisioning");
 Object.defineProperty(exports, "ProvisioningResource", { enumerable: true, get: function () { return provisioning_1.ProvisioningResource; } });
 var secrets_1 = require("./resources/secrets");

package/dist/resources/chat.d.ts

@@ -42,6 +42,25 @@ export interface StreamMessageForAppUserInput {
      * here to turn the sanitizer OFF for this operator-facing surface.
      */
     channel?: ChannelContext;
+    /**
+     * AGF-OUTCOMES I5 — what the App declares about this end user for this
+     * turn. The platform shows it to the agent in the per-turn identity block
+     * as "declared by the App, not verified by AgentForge"; omit for no claims.
+     */
+    caller?: AppCallerClaims;
+}
+/** What an App declares about its end user on a chat turn (see `caller`). */
+export interface AppCallerClaims {
+    displayName?: string;
+    email?: string;
+    phone?: string;
+    /** App-defined role slugs (e.g. `mayorista`); prompts can branch on them. */
+    roles?: string[];
+    /** `true` only when the App itself verified the email. */
+    emailVerified?: boolean;
+    /** Where the person is, in the App's words — e.g. the reference of a
+     *  scanned QR code (`mesa-03`). */
+    location?: string;
 }
 export declare class ChatResource {
     private readonly client;

package/dist/resources/chat.js

@@ -149,6 +149,7 @@ class ChatResource {
             externalUserId: input.externalUserId,
             content: input.content,
             ...(input.channel ? { channel: input.channel } : {}),
+            ...(input.caller ? { caller: input.caller } : {}),
         });
         if (!res.body) {
             throw new Error('chat.streamMessageForAppUser: response has no readable body');

package/dist/resources/config.d.ts

@@ -0,0 +1,11 @@
+import type { AgentForgeClient } from '../client';
+import type { TenantConfigEntry } from '../types';
+export declare class TenantConfigResource {
+    private readonly client;
+    constructor(client: AgentForgeClient);
+    /** `GET /api/v1/config` — config variables that have a value. */
+    list(): Promise<TenantConfigEntry[]>;
+    /** `PUT /api/v1/config/:key` — set one variable (created when missing).
+     *  409 when the key is a secret, not a config variable. */
+    set(key: string, value: string): Promise<TenantConfigEntry>;
+}

package/dist/resources/config.js

@@ -0,0 +1,23 @@
+"use strict";
+// config resource — the tenant's config variables (`{{config:KEY}}` in
+// prompts), company scope of the tenant the client acts in (AGF-096v). A
+// host App fills the variables a template install created empty, e.g. the
+// business name and hours of an owner's tenant.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantConfigResource = void 0;
+class TenantConfigResource {
+    constructor(client) {
+        this.client = client;
+    }
+    /** `GET /api/v1/config` — config variables that have a value. */
+    async list() {
+        const res = await this.client.request('GET', '/api/v1/config');
+        return res.items;
+    }
+    /** `PUT /api/v1/config/:key` — set one variable (created when missing).
+     *  409 when the key is a secret, not a config variable. */
+    async set(key, value) {
+        return this.client.request('PUT', `/api/v1/config/${encodeURIComponent(key)}`, { value });
+    }
+}
+exports.TenantConfigResource = TenantConfigResource;

package/dist/resources/installations.d.ts

@@ -0,0 +1,22 @@
+import type { AgentForgeClient } from '../client';
+import type { AppInstallation } from '../types';
+export interface InstallAppInput {
+    /** The host's id for this tenant (e.g. the owner id). Unique per App. */
+    externalRef: string;
+    /** Display name of the new tenant. */
+    name: string;
+}
+export declare class InstallationsResource {
+    private readonly client;
+    constructor(client: AgentForgeClient);
+    /** `POST /api/v1/installations` — new tenant + installation, or the existing one for this ref. */
+    install(input: InstallAppInput): Promise<AppInstallation & {
+        created: boolean;
+    }>;
+    /** `GET /api/v1/installations` — every installation of this App. */
+    list(): Promise<AppInstallation[]>;
+    /** `GET /api/v1/installations/:tenantId`. 404 → `AgentForgeNotFoundError`. */
+    get(tenantId: string): Promise<AppInstallation>;
+    /** `DELETE /api/v1/installations/:tenantId` — suspend (data kept). */
+    suspend(tenantId: string): Promise<AppInstallation>;
+}

package/dist/resources/installations.js

@@ -0,0 +1,45 @@
+"use strict";
+// installations resource — App installations (AGF-096v, GitHub-App style).
+//
+// One App, many tenants: an App installs itself into a NEW tenant for one of
+// its customers (PoodleDeck: one per business owner) and then acts inside it
+// with the same `sk_live_` through `af.forTenant(tenantId)`.
+//
+//   - `install({ externalRef, name })` — `POST /api/v1/installations`.
+//     Creates the tenant + installation; idempotent by `externalRef` (a retry
+//     returns the same tenant, `created: false`).
+//   - `list()` / `get(tenantId)` — the App's installations.
+//   - `suspend(tenantId)` — `DELETE`; the tenant and its data are kept and a
+//     later `install` with the same ref re-activates it.
+//
+// App secret only, called from the App's own tenant (not on a `forTenant`
+// client — the platform answers 403 there).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstallationsResource = void 0;
+class InstallationsResource {
+    constructor(client) {
+        this.client = client;
+    }
+    /** `POST /api/v1/installations` — new tenant + installation, or the existing one for this ref. */
+    async install(input) {
+        const res = await this.client.requestRaw('POST', '/api/v1/installations', {
+            rawBody: JSON.stringify(input),
+        });
+        const body = (await res.json());
+        return { ...body, created: res.status === 201 };
+    }
+    /** `GET /api/v1/installations` — every installation of this App. */
+    async list() {
+        const res = await this.client.request('GET', '/api/v1/installations');
+        return res.items;
+    }
+    /** `GET /api/v1/installations/:tenantId`. 404 → `AgentForgeNotFoundError`. */
+    async get(tenantId) {
+        return this.client.request('GET', `/api/v1/installations/${encodeURIComponent(tenantId)}`);
+    }
+    /** `DELETE /api/v1/installations/:tenantId` — suspend (data kept). */
+    async suspend(tenantId) {
+        return this.client.request('DELETE', `/api/v1/installations/${encodeURIComponent(tenantId)}`);
+    }
+}
+exports.InstallationsResource = InstallationsResource;

package/dist/resources/teams.d.ts

@@ -1,5 +1,5 @@
 import type { AgentForgeClient } from '../client';
-import type { CreateTeamInput, PublicTeamLanding, TeamSummary } from '../types';
+import type { CreateTeamInput, PublicTeamLanding, TeamSummary, UpdateTeamInput } from '../types';
 export declare class TeamsResource {
     private readonly client;
     constructor(client: AgentForgeClient);
@@ -7,6 +7,9 @@ export declare class TeamsResource {
     getPublic(slug: string): Promise<PublicTeamLanding>;
     /** `POST /api/v1/teams` — create a team (and its orchestrator) in the caller's tenant. */
     create(input: CreateTeamInput): Promise<TeamSummary>;
+    /** `PATCH /api/v1/teams/:teamId` — e.g. give a team installed from a
+     *  template its public page (`publicSlug` + `visibility: 'public'`). */
+    update(teamId: string, input: UpdateTeamInput): Promise<TeamSummary>;
     /** `DELETE /api/v1/teams/:teamId` — delete a team of the caller's tenant. */
     delete(teamId: string): Promise<void>;
 }

package/dist/resources/teams.js

@@ -32,6 +32,11 @@ class TeamsResource {
     async create(input) {
         return this.client.request('POST', '/api/v1/teams', input);
     }
+    /** `PATCH /api/v1/teams/:teamId` — e.g. give a team installed from a
+     *  template its public page (`publicSlug` + `visibility: 'public'`). */
+    async update(teamId, input) {
+        return this.client.request('PATCH', `/api/v1/teams/${encodeURIComponent(teamId)}`, input);
+    }
     /** `DELETE /api/v1/teams/:teamId` — delete a team of the caller's tenant. */
     async delete(teamId) {
         await this.client.request('DELETE', `/api/v1/teams/${encodeURIComponent(teamId)}`);

package/dist/resources/templates.d.ts

@@ -0,0 +1,23 @@
+import type { AgentForgeClient } from '../client';
+import type { TemplateDetail, TemplateInstallResult, TemplateSummary } from '../types';
+export interface ListTemplatesInput {
+    kind?: 'agent' | 'team';
+    /** Every tag must match (AND), e.g. ['poodledeck', 'type:food']. */
+    tags?: string[];
+    /** Free-text search. */
+    q?: string;
+    /** 1–200. */
+    limit?: number;
+}
+export declare class TemplatesResource {
+    private readonly client;
+    constructor(client: AgentForgeClient);
+    /** `GET /api/v1/templates` — templates visible to the caller's tenant. */
+    list(input?: ListTemplatesInput): Promise<TemplateSummary[]>;
+    /** `GET /api/v1/templates/:id` — summary + payload. 404 → `AgentForgeNotFoundError`. */
+    get(templateId: string): Promise<TemplateDetail>;
+    /** `POST /api/v1/templates/:id/install` — clone into the caller's tenant. */
+    install(templateId: string, input?: {
+        name?: string;
+    }): Promise<TemplateInstallResult>;
+}

package/dist/resources/templates.js

@@ -0,0 +1,40 @@
+"use strict";
+// templates resource — the platform template catalog for API keys
+// (AGF-096v). A host App lists agent/team templates (its own + system +
+// public, filtered by tag) and installs one into the tenant it acts in —
+// usually an owner's tenant via `af.forTenant(tenantId).templates.install`.
+//
+// Installing copies the team, members, orchestrator, skills and tools, and
+// creates the template's config variables EMPTY (`configCreated`); fill them
+// with `config.set`. Rows created by an App secret are owned by the App.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TemplatesResource = void 0;
+class TemplatesResource {
+    constructor(client) {
+        this.client = client;
+    }
+    /** `GET /api/v1/templates` — templates visible to the caller's tenant. */
+    async list(input = {}) {
+        const qs = new URLSearchParams();
+        if (input.kind)
+            qs.set('kind', input.kind);
+        for (const tag of input.tags ?? [])
+            qs.append('tag', tag);
+        if (input.q)
+            qs.set('q', input.q);
+        if (input.limit !== undefined)
+            qs.set('limit', String(input.limit));
+        const query = qs.toString();
+        const res = await this.client.request('GET', `/api/v1/templates${query ? `?${query}` : ''}`);
+        return res.items;
+    }
+    /** `GET /api/v1/templates/:id` — summary + payload. 404 → `AgentForgeNotFoundError`. */
+    async get(templateId) {
+        return this.client.request('GET', `/api/v1/templates/${encodeURIComponent(templateId)}`);
+    }
+    /** `POST /api/v1/templates/:id/install` — clone into the caller's tenant. */
+    async install(templateId, input = {}) {
+        return this.client.request('POST', `/api/v1/templates/${encodeURIComponent(templateId)}/install`, input);
+    }
+}
+exports.TemplatesResource = TemplatesResource;

package/dist/types.d.ts

@@ -650,4 +650,83 @@ export interface TeamSummary {
     orchestrationMode: 'flat' | 'hierarchical';
     [field: string]: unknown;
 }
+/** `PATCH /api/v1/teams/:id` body — only the fields sent change. */
+export interface UpdateTeamInput {
+    name?: string;
+    description?: string | null;
+    /** Replaces the whole member set (short form: agent ids). */
+    memberAgentIds?: string[];
+    roleHints?: Record<string, string>;
+    /** Public page handle; `null` removes it. */
+    publicSlug?: string | null;
+    visibility?: 'private' | 'public';
+    orchestrationMode?: 'flat' | 'hierarchical';
+}
+/** An App's installation in a tenant (AGF-096v, `/api/v1/installations`). */
+export interface AppInstallation {
+    id: string;
+    /** The installed tenant — pass it to `af.forTenant()`. */
+    tenantId: string;
+    externalRef: string;
+    status: 'active' | 'suspended';
+    createdAt: string;
+}
+/** One field of a template's config form (`{{config:KEY}}` variables). */
+export interface TemplateConfigField {
+    key: string;
+    label: string;
+    help?: string;
+    /** 'text' | 'textarea' | 'hours' | 'address' | 'url' | 'phone' | … */
+    type: string;
+    required: boolean;
+    /** Resource picker for connector-backed fields (e.g. a Google Sheet). */
+    picker?: Record<string, unknown>;
+}
+/** A template as the API-key catalog lists it (`GET /api/v1/templates`). */
+export interface TemplateSummary {
+    id: string;
+    tenantId: string | null;
+    kind: 'agent' | 'team';
+    name: string;
+    description?: string;
+    icon?: string;
+    category?: string;
+    tags?: string[];
+    visibility: 'system' | 'tenant' | 'public';
+    requiresConnectors?: string[];
+    requiresSecrets?: string[];
+    requiresConfig?: string[];
+    configSchema?: TemplateConfigField[];
+    installsCount: number;
+    currentVersion: number;
+    priceCents?: number;
+    createdAt: string;
+    updatedAt: string;
+    [field: string]: unknown;
+}
+/** `GET /api/v1/templates/:id` — summary + the snapshot it installs. */
+export interface TemplateDetail extends TemplateSummary {
+    payload: Record<string, unknown>;
+}
+/** `POST /api/v1/templates/:id/install` result. */
+export interface TemplateInstallResult {
+    kind: 'agent' | 'team';
+    agentId: string | null;
+    agentSlug: string | null;
+    teamId: string | null;
+    teamSlug: string | null;
+    requiresConnectors: string[];
+    requiresSecrets: string[];
+    requiresConfig: string[];
+    configSchema?: TemplateConfigField[];
+    /** Config variables this install created EMPTY — the host fills them. */
+    configCreated?: string[];
+}
+/** A tenant config variable (`/api/v1/config`). */
+export interface TenantConfigEntry {
+    key: string;
+    description: string;
+    value: string | null;
+    updatedAt?: string;
+}
 export {};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@agentforge-io/sdk-server",
-  "version": "4.7.0",
-  "description": "Server-side SDK for backend apps integrating with AgentForge platform. Auth via ChatToken or ak_live_ API key.",
+  "version": "4.9.0",
+  "description": "Server-side SDK for backend apps integrating with AgentForge platform. Auth via ChatToken, ak_live_ API key or App secret (sk_live_), with App installations across tenants.",
   "license": "MIT",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",