@inferencesh/sdk 0.14.2 → 0.15.0

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.15.0] - 2026-10-02
+
+### Added
+
+- `useAgentActions().updateChatSettings(settings)`: change a chat's name, visibility, `allow_all_tools` (run every tool without asking; switching it on approves the calls already waiting), `disable_hooks` and `forget_memory` (`POST /chats/{id}/settings`).
+- `useAgentActions().switchAgent(agentRef)`: hand the chat to another agent our loop runs; the next message goes to it. A harness agent is refused.
+- Types: `ChatSettingsRequest`; `ChatData.allow_all_tools` and `disable_hooks`; per-server MCP headers; API key scope and an optional `last_used_at`; engine-picker provider options.
+
+### Changed
+
+- The `inference-src` export condition is listed before `types`, so a bundler that sets it resolves the TypeScript source.
+
 ## [0.14.2] - 2026-10-01
 
 ### Added

package/dist/agent/actions.js

@@ -386,6 +386,42 @@ export function createActions(ctx) {
                 throw error;
             }
         },
+        updateChatSettings: async (settings) => {
+            const chatId = getChatId();
+            if (!chatId) {
+                console.error('[AgentSDK] Cannot change chat settings without a chatId');
+                return;
+            }
+            try {
+                // The response carries the chat without its messages: update the
+                // chat and keep the conversation on screen.
+                dispatch({ type: 'UPDATE_CHAT', payload: await api.updateChatSettings(client, chatId, settings) });
+            }
+            catch (error) {
+                console.error('[AgentSDK] Failed to change chat settings:', error);
+                const err = error instanceof Error ? error : new Error('Failed to change chat settings');
+                dispatch({ type: 'SET_ERROR', payload: err.message });
+                callbacks.onError?.(err);
+                throw error;
+            }
+        },
+        switchAgent: async (agentRef) => {
+            const chatId = getChatId();
+            if (!chatId) {
+                console.error('[AgentSDK] Cannot switch the agent without a chatId');
+                return;
+            }
+            try {
+                dispatch({ type: 'UPDATE_CHAT', payload: await api.setAgent(client, chatId, agentRef) });
+            }
+            catch (error) {
+                console.error('[AgentSDK] Failed to switch the agent:', error);
+                const err = error instanceof Error ? error : new Error('Failed to switch the agent');
+                dispatch({ type: 'SET_ERROR', payload: err.message });
+                callbacks.onError?.(err);
+                throw error;
+            }
+        },
         cancelMessage: async (messageId) => {
             try {
                 await api.cancelMessage(client, messageId);

package/dist/agent/api.d.ts

@@ -7,7 +7,7 @@
  *
  * /agents/run stays for A2A/programmatic use.
  */
-import type { ChatDTO, ChatMessageDTO, InterruptDTO } from '../types';
+import type { ChatDTO, ChatMessageDTO, ChatSettingsRequest, InterruptDTO } from '../types';
 import type { AgentOptions, AgentClient, AgentInfo, FileRef } from './types';
 export interface SendResult {
     chatId: string;
@@ -47,6 +47,7 @@ export declare function submitToolResult(client: AgentClient, toolInvocationId:
 export declare function approveTool(client: AgentClient, toolInvocationId: string): Promise<void>;
 export declare function rejectTool(client: AgentClient, toolInvocationId: string, reason?: string): Promise<void>;
 export declare function alwaysAllowTool(client: AgentClient, chatId: string, toolInvocationId: string, toolName: string): Promise<void>;
+export declare function updateChatSettings(client: AgentClient, chatId: string, settings: ChatSettingsRequest): Promise<ChatDTO>;
 export declare function resolveInterrupt(client: AgentClient, interruptId: string, decision: 'allow' | 'deny'): Promise<InterruptDTO>;
 export declare function listRunInterrupts(client: AgentClient, runId: string): Promise<InterruptDTO[]>;
 export declare function uploadFile(client: AgentClient, file: globalThis.File): Promise<FileRef>;

package/dist/agent/api.js

@@ -156,6 +156,10 @@ export async function alwaysAllowTool(client, chatId, toolInvocationId, toolName
         data: { tool_name: toolName }
     });
 }
+export async function updateChatSettings(client, chatId, settings) {
+    const resp = await client.http.request('post', `/chats/${chatId}/settings`, { data: settings });
+    return resp.data;
+}
 // =========================================================================
 // Interrupt operations
 // =========================================================================

package/dist/agent/types.d.ts

@@ -4,7 +4,7 @@
  * Public types for the Agent chat module.
  */
 import type { Dispatch } from 'react';
-import type { AgentRunDTO, AgentVersionDTO, ChatDTO, ChatMessageDTO, AgentTool, AgentConfigInput as GeneratedAgentConfig, CoreAppConfigInput as CoreAppConfig, FileRef, ElicitResult } from '../types';
+import type { AgentRunDTO, AgentVersionDTO, ChatDTO, ChatMessageDTO, ChatSettingsRequest, AgentTool, AgentConfigInput as GeneratedAgentConfig, CoreAppConfigInput as CoreAppConfig, FileRef, ElicitResult } from '../types';
 import type { HttpClient } from '../http/client';
 import type { StreamableManager } from '../http/streamable';
 import type { PollManager } from '../http/poll';
@@ -134,6 +134,10 @@ export interface AgentChatActions {
     rejectTool: (toolInvocationId: string, reason?: string) => Promise<void>;
     /** Always allow a tool for this chat (approves + auto-approves future invocations) */
     alwaysAllowTool: (toolInvocationId: string, toolName: string) => Promise<void>;
+    /** Change this chat's settings, e.g. allow_all_tools (switching it on approves the calls waiting) */
+    updateChatSettings: (settings: ChatSettingsRequest) => Promise<void>;
+    /** Hand this chat to another agent (namespace/name); the next message goes to it. Agents our loop runs only. */
+    switchAgent: (agentRef: string) => Promise<void>;
     /** Cancel a queued message before the agent processes it */
     cancelMessage: (messageId: string) => Promise<void>;
     /** Resolve an interrupt gate (allow or deny) */

package/dist/types.d.ts

@@ -552,6 +552,18 @@ export interface MeResponse {
      */
     team_view?: TeamViewDTO;
     diagnostics?: DiagnosticsConfig;
+    /**
+     * PersonalTeamID is the caller's personal workspace, empty for a managed
+     * account, which has none.
+     */
+    personal_team_id?: string;
+    /**
+     * NeedsUsername: the caller has not chosen a username yet (their
+     * personal workspace's setup is incomplete). Every new account picks one
+     * before landing, whichever team it lands in (an invite's included), via
+     * POST /teams/{personal_team_id}/complete-setup.
+     */
+    needs_username: boolean;
 }
 export interface TeamCreateRequest {
     name: string;
@@ -666,6 +678,11 @@ export interface CreateApiKeyRequest {
     name: string;
     expires_at?: string;
     scopes?: string[];
+    /**
+     * Scope is who the key acts as. Empty means user (a personal key);
+     * workspace requires manage_keys.
+     */
+    scope?: ApiKeyScope;
 }
 /**
  * EstimateCostRequest is the request for POST /store/apps/{appId}/estimate.
@@ -1042,10 +1059,24 @@ export interface ScopePreset {
 export interface ApiKeyDTO extends BaseModelDTO, PermissionModelDTO {
     name: string;
     key: string;
-    last_used_at: string;
+    /**
+     * LastUsedAt is absent for a key that has never been used.
+     */
+    last_used_at?: string;
     expires_at?: string;
     scopes: Scope[];
     source?: string;
+    /**
+     * Scope is who the key acts as: its creator (user) or the workspace.
+     */
+    scope: ApiKeyScope;
+    /**
+     * CreatedBy is the person who created the key; Creator is that person,
+     * set on lists. On a workspace key user_id is the workspace's service
+     * account, so these are what show who made it.
+     */
+    created_by: string;
+    creator?: TeamMemberUserDTO;
 }
 /**
  * AppPricing configures all pricing using CEL expressions.
@@ -1716,6 +1747,36 @@ export interface SubmitBountyResponse {
     submission: BountySubmissionDTO;
     granted_amount?: number;
 }
+/**
+ * ChatSettingsRequest changes a chat's settings. A field left out is left as
+ * it is.
+ */
+export interface ChatSettingsRequest {
+    /**
+     * Name renames the chat. It cannot be empty.
+     */
+    name?: string;
+    /**
+     * Visibility is who can open the chat: private (only you), team (your
+     * workspace) or public (anyone with the link).
+     */
+    visibility?: Visibility;
+    /**
+     * AllowAllTools runs every tool call without asking. Switching it on also
+     * approves the calls already waiting.
+     */
+    allow_all_tools?: boolean;
+    /**
+     * DisableHooks stops the agent's lifecycle hooks (suggest, learn,
+     * webhooks, gates) firing in this chat.
+     */
+    disable_hooks?: boolean;
+    /**
+     * ForgetMemory removes these keys from the chat's memory, the notes the
+     * agent keeps for this conversation. A key that is not there is ignored.
+     */
+    forget_memory?: string[];
+}
 /**
  * ChatDTO for API responses
  */
@@ -2069,7 +2130,7 @@ export interface EntitlementErrorMeta {
  * and APIError.Code on the legacy envelope. Clients branch on these, so a
  * code is a named const here, where it generates into models and the SDKs.
  */
-export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "team_role_required" | "blocked_by_usage_policy" | "otp_required" | "mcp_auth_expired" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
+export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "team_role_required" | "blocked_by_usage_policy" | "last_owner" | "account_deactivated" | "account_banned" | "person_required" | "otp_required" | "mcp_auth_expired" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
 export declare const ErrorCodeInvalidRequest: ErrorCode;
 export declare const ErrorCodeValidationError: ErrorCode;
 export declare const ErrorCodeUnauthorized: ErrorCode;
@@ -2093,6 +2154,25 @@ export declare const ErrorCodeTeamRoleRequired: ErrorCode;
  * usage policy. The message names who to ask.
  */
 export declare const ErrorCodeBlockedByUsagePolicy: ErrorCode;
+/**
+ * ErrorCodeLastOwner (400): the change would leave a team (or an org's
+ * workspace) without an owner.
+ */
+export declare const ErrorCodeLastOwner: ErrorCode;
+/**
+ * ErrorCodeAccountDeactivated (403): an org deactivated this managed
+ * account; sign-in and every request are refused until an org admin
+ * reactivates it. ErrorCodeAccountBanned (403): the platform suspended
+ * the account.
+ */
+export declare const ErrorCodeAccountDeactivated: ErrorCode;
+export declare const ErrorCodeAccountBanned: ErrorCode;
+/**
+ * ErrorCodePersonRequired (403): only a person may do this, and the
+ * caller is a workspace's service account (a workspace API key), or the
+ * account is one and cannot sign in.
+ */
+export declare const ErrorCodePersonRequired: ErrorCode;
 export declare const ErrorCodeOTPRequired: ErrorCode;
 export declare const ErrorCodeMCPAuthExpired: ErrorCode;
 /**
@@ -2529,6 +2609,11 @@ export interface InstanceTypeDTO extends BaseModelDTO, PermissionModelDTO {
      * for this rental type. Empty on the raw catalog.
      */
     rental_type?: InstanceRentalType;
+    /**
+     * Options lists every in-stock provider for an engine-picker offer,
+     * cheapest first; the offer itself is the first one. Empty on the raw catalog.
+     */
+    options?: InstanceTypeOptionDTO[];
     configuration?: InstanceTypeConfiguration;
     availability: InstanceTypeAvailability[];
     boot_time?: InstanceTypeBootTime;
@@ -2554,6 +2639,28 @@ export interface InstanceTypeAvailability {
      */
     hourly_price?: number;
 }
+/**
+ * InstanceTypeOptionDTO is one launchable provider behind an engine-picker
+ * offer. Launch with its cloud and shade_instance_type, one of its regions and
+ * the offer's rental_type.
+ */
+export interface InstanceTypeOptionDTO {
+    cloud: InstanceCloudProvider;
+    cloud_logo_url?: string;
+    shade_instance_type: string;
+    cloud_instance_type: string;
+    hourly_price: number;
+    configuration?: InstanceTypeConfiguration;
+    regions: InstanceTypeOptionRegion[];
+}
+/**
+ * InstanceTypeOptionRegion is an in-stock region and its hourly price in
+ * cents. Spot prices can differ by region.
+ */
+export interface InstanceTypeOptionRegion {
+    region: string;
+    hourly_price: number;
+}
 export interface InstanceTypeBootTime {
     average_seconds: number;
     updated_at: string;
@@ -2914,6 +3021,17 @@ export interface MCPServerDTO {
     auth_type: MCPServerAuthType;
     oauth_client_id?: string;
     default_scopes: StringSlice;
+    /**
+     * Headers are static HTTP headers sent on every request to the server,
+     * set by the team's admins (e.g. X-MCP-Toolsets, X-MCP-Readonly).
+     */
+    headers?: {
+        [key: string]: string;
+    };
+    /**
+     * Setup is what the server's directory entry knows about setting it up.
+     */
+    setup?: MCPServerSetup;
     documentation_url: string;
     connection_status?: string;
     /**
@@ -2922,6 +3040,27 @@ export interface MCPServerDTO {
      */
     connection_scope?: CredentialScope;
 }
+/**
+ * MCPServerSetup is what a server's directory entry knows about setting the
+ * server up, as data: shown to whoever connects a server on the same host,
+ * so no server's specifics live in code.
+ */
+export interface MCPServerSetup {
+    /**
+     * ResourceAppID is the id the server's API has at its authorization
+     * server, which an organization must know before it can approve access
+     * (for a Microsoft Entra resource: the application id a tenant needs a
+     * service principal for).
+     */
+    resource_app_id?: string;
+    /**
+     * RecommendedHeaders are the least-privilege static headers the server
+     * documents (e.g. X-MCP-Toolsets), offered by the headers editor.
+     */
+    recommended_headers?: {
+        [key: string]: string;
+    };
+}
 /**
  * NotificationDTO is the data transfer object
  */
@@ -3793,6 +3932,12 @@ export interface TeamDTO extends BaseModelDTO {
      * OrgID of the org this team belongs to ('' = standalone team).
      */
     org_id?: string;
+    /**
+     * OrgName is that org's display name (its workspace's name), set on the
+     * caller's team list (/teams) so a member of one of its teams sees whose
+     * org it is without belonging to the org workspace.
+     */
+    org_name?: string;
     /**
      * UsagePolicyID of the team's own usage policy ('' = inherit the org's,
      * or ungoverned when standalone, INF-808).
@@ -3987,6 +4132,11 @@ export interface UserDTO extends BaseModelDTO {
      * cannot create teams/orgs).
      */
     managed_by_org_id?: string;
+    /**
+     * ServiceTeamID: set on a workspace's service account, the principal its
+     * workspace API keys act as.
+     */
+    service_team_id?: string;
     email: string;
     name: string;
     full_name: string;
@@ -4197,6 +4347,23 @@ export interface A2UISurface {
     components: A2UIComponent[];
     dataModel?: any;
 }
+/**
+ * ApiKeyScope is who an API key acts as, chosen when it is created, the way a
+ * credential's scope says who owns it.
+ */
+export type ApiKeyScope = "user" | "workspace";
+/**
+ * ApiKeyScopeUser is a personal key: it acts as the person who created it,
+ * in the workspace it was created in, and ends when they can no longer
+ * act there. Device-auth, `belt auth token`, OAuth and engine keys are
+ * always personal.
+ */
+export declare const ApiKeyScopeUser: ApiKeyScope;
+/**
+ * ApiKeyScopeWorkspace is a workspace key: it acts as the workspace's
+ * service account, not a person, and outlives the admin who created it.
+ */
+export declare const ApiKeyScopeWorkspace: ApiKeyScope;
 export type AppCategory = "image" | "video" | "audio" | "text" | "chat" | "3d" | "other" | "flow";
 export declare const AppCategoryImage: AppCategory;
 export declare const AppCategoryVideo: AppCategory;
@@ -4330,6 +4497,17 @@ export interface ChatData {
     plan_steps: PlanStep[];
     memory: StringEncodedMap;
     always_allowed_tools: string[];
+    /**
+     * AllowAllTools runs every tool call in this chat without asking. The
+     * person switches it in the chat's settings, and off again at any time.
+     */
+    allow_all_tools: boolean;
+    /**
+     * DisableHooks stops the agent's lifecycle hooks firing in this chat. A
+     * review branch is opened with it set, so a review cannot fire the hook
+     * that reviews it.
+     */
+    disable_hooks?: boolean;
 }
 /**
  * PlanStep represents a step in an agent's execution plan
@@ -5326,11 +5504,24 @@ export declare const TeamKindOrg: TeamKind;
  * TeamCapability is one thing a caller may do to a team's settings. The set is
  * closed; team.Subject.Can is the only place that grants them.
  */
-export type TeamCapability = "edit_profile" | "manage_members" | "view_members" | "manage_keys" | "manage_vault" | "view_billing" | "manage_billing" | "view_policy" | "manage_policy" | "manage_org" | "manage_sso" | "archive" | "create_team" | "create_org" | "connect_org_credential" | "connect_platform_credential";
+export type TeamCapability = "edit_profile" | "manage_members" | "manage_admins" | "view_members" | "manage_keys" | "create_keys" | "manage_vault" | "view_billing" | "manage_billing" | "view_policy" | "manage_policy" | "manage_org" | "manage_sso" | "archive" | "create_team" | "create_org" | "connect_org_credential" | "connect_platform_credential";
 export declare const TeamCapabilityEditProfile: TeamCapability;
 export declare const TeamCapabilityManageMembers: TeamCapability;
+/**
+ * ManageAdmins: granting, changing and removing the admin and owner
+ * roles. Owners only; admins manage plain members.
+ */
+export declare const TeamCapabilityManageAdmins: TeamCapability;
 export declare const TeamCapabilityViewMembers: TeamCapability;
+/**
+ * ManageKeys: the workspace's keys. Creating workspace keys, and listing
+ * and revoking every key of the workspace, whoever created it.
+ */
 export declare const TeamCapabilityManageKeys: TeamCapability;
+/**
+ * CreateKeys: creating, listing and revoking your own personal keys.
+ */
+export declare const TeamCapabilityCreateKeys: TeamCapability;
 export declare const TeamCapabilityManageVault: TeamCapability;
 export declare const TeamCapabilityViewBilling: TeamCapability;
 export declare const TeamCapabilityManageBilling: TeamCapability;

package/dist/types.js

@@ -325,6 +325,25 @@ export const ErrorCodeTeamRoleRequired = "team_role_required";
  * usage policy. The message names who to ask.
  */
 export const ErrorCodeBlockedByUsagePolicy = "blocked_by_usage_policy";
+/**
+ * ErrorCodeLastOwner (400): the change would leave a team (or an org's
+ * workspace) without an owner.
+ */
+export const ErrorCodeLastOwner = "last_owner";
+/**
+ * ErrorCodeAccountDeactivated (403): an org deactivated this managed
+ * account; sign-in and every request are refused until an org admin
+ * reactivates it. ErrorCodeAccountBanned (403): the platform suspended
+ * the account.
+ */
+export const ErrorCodeAccountDeactivated = "account_deactivated";
+export const ErrorCodeAccountBanned = "account_banned";
+/**
+ * ErrorCodePersonRequired (403): only a person may do this, and the
+ * caller is a workspace's service account (a workspace API key), or the
+ * account is one and cannot sign in.
+ */
+export const ErrorCodePersonRequired = "person_required";
 export const ErrorCodeOTPRequired = "otp_required";
 export const ErrorCodeMCPAuthExpired = "mcp_auth_expired";
 /**
@@ -500,6 +519,18 @@ export const A2UIForm = "Form";
  * the viewer. Rendered from the artifact's /render endpoint.
  */
 export const A2UIArtifact = "Artifact";
+/**
+ * ApiKeyScopeUser is a personal key: it acts as the person who created it,
+ * in the workspace it was created in, and ends when they can no longer
+ * act there. Device-auth, `belt auth token`, OAuth and engine keys are
+ * always personal.
+ */
+export const ApiKeyScopeUser = "user";
+/**
+ * ApiKeyScopeWorkspace is a workspace key: it acts as the workspace's
+ * service account, not a person, and outlives the admin who created it.
+ */
+export const ApiKeyScopeWorkspace = "workspace";
 export const AppCategoryImage = "image";
 export const AppCategoryVideo = "video";
 export const AppCategoryAudio = "audio";
@@ -1094,8 +1125,21 @@ export const TeamKindOrgMember = "org_member";
 export const TeamKindOrg = "org";
 export const TeamCapabilityEditProfile = "edit_profile";
 export const TeamCapabilityManageMembers = "manage_members";
+/**
+ * ManageAdmins: granting, changing and removing the admin and owner
+ * roles. Owners only; admins manage plain members.
+ */
+export const TeamCapabilityManageAdmins = "manage_admins";
 export const TeamCapabilityViewMembers = "view_members";
+/**
+ * ManageKeys: the workspace's keys. Creating workspace keys, and listing
+ * and revoking every key of the workspace, whoever created it.
+ */
 export const TeamCapabilityManageKeys = "manage_keys";
+/**
+ * CreateKeys: creating, listing and revoking your own personal keys.
+ */
+export const TeamCapabilityCreateKeys = "create_keys";
 export const TeamCapabilityManageVault = "manage_vault";
 export const TeamCapabilityViewBilling = "view_billing";
 export const TeamCapabilityManageBilling = "manage_billing";

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@inferencesh/sdk",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "Official JavaScript/TypeScript SDK for inference.sh - Run AI models with a simple API",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
       "inference-src": "./src/index.ts",
+      "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
     "./proxy": {
@@ -28,8 +28,8 @@
       "default": "./dist/proxy/hono.js"
     },
     "./proxy/remix": {
-      "types": "./dist/proxy/remix.d.ts",
       "inference-src": "./src/proxy/remix.ts",
+      "types": "./dist/proxy/remix.d.ts",
       "default": "./dist/proxy/remix.js"
     },
     "./proxy/svelte": {
@@ -37,13 +37,13 @@
       "default": "./dist/proxy/svelte.js"
     },
     "./agent": {
-      "types": "./dist/agent/index.d.ts",
       "inference-src": "./src/agent/index.ts",
+      "types": "./dist/agent/index.d.ts",
       "default": "./dist/agent/index.js"
     },
     "./internal/upload": {
-      "types": "./dist/api/files.d.ts",
       "inference-src": "./src/api/files.ts",
+      "types": "./dist/api/files.d.ts",
       "default": "./dist/api/files.js"
     }
   },