@inferencesh/sdk 0.17.0 → 0.18.0

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.18.0] - 2026-10-04
+
+### Added
+
+- `AgentPermissions` and `permissions` on agent configs: what an agent's new chats may do without asking (`allow_all_tools`).
+- `PolicyKind` (`RemoteExec`, `Workspace`, `Harness`, `Tool`, `WebFetch`, and the usage kinds `App`, `Agent`, `Knowledge`, `Mcp`, `Flow`) with its constants. `PolicyRuleDTO.kind` is a `PolicyKind`.
+
+### Removed
+
+- `ChatData.always_allowed_tools`. A chat's always-allow list became chat rules (`GET /chats/{id}/rules`); the api no longer sends it.
+- `TeamDTO.usage_policy_id`. A workspace's usage policy is a policy attached to it; the org's workspace list carries it.
+
 ## [0.17.0] - 2026-10-02
 
 ### Changed

package/dist/types.d.ts

@@ -18,6 +18,22 @@ export interface InternalToolsConfig {
     remote?: boolean;
     knowledge?: boolean;
 }
+/**
+ * AgentPermissions is what an agent's new chats in its own workspace may do
+ * without asking (INF-906). Each is copied into such a chat when it is
+ * created; the chat owns it from then on. Chats other workspaces start with
+ * the agent get none of it: they run on their own remotes and tools. A team
+ * or org policy still asks or denies over it.
+ */
+export interface AgentPermissions {
+    /**
+     * AllowAllTools starts each new chat with "allow every tool" on: loop
+     * tools, harness tools and remote_exec commands run without asking. For
+     * agents nobody watches (webhook and cron runs), where an approval would
+     * stall the run.
+     */
+    allow_all_tools?: boolean;
+}
 /**
  * AgentTool represents a unified tool that can be used by an agent
  */
@@ -254,6 +270,7 @@ export interface AgentVersionDTO extends BaseModelDTO, PermissionModelDTO {
     skills: SkillConfig[];
     context?: ContextField[];
     internal_tools?: InternalToolsConfig;
+    permissions?: AgentPermissions;
     hooks?: LifecycleHookConfig[];
     output_schema?: any;
 }
@@ -287,6 +304,7 @@ export interface AgentConfigInput {
     skills?: SkillConfig[];
     context?: ContextField[];
     internal_tools?: InternalToolsConfig;
+    permissions?: AgentPermissions;
     hooks?: LifecycleHookConfig[];
     output_schema?: any;
 }
@@ -1870,13 +1888,6 @@ export interface ChatMessageDTO extends BaseModelDTO, PermissionModelDTO {
     tool_call_id?: string;
     tool_invocations?: ToolInvocationDTO[];
 }
-/**
- * PolicyEffect is a rule's outcome: allow, ask or deny.
- */
-export type PolicyEffect = "allow" | "ask" | "deny";
-export declare const PolicyEffectAllow: PolicyEffect;
-export declare const PolicyEffectAsk: PolicyEffect;
-export declare const PolicyEffectDeny: PolicyEffect;
 /**
  * PolicyRuleDTO is one rule, typed form Kind[selector](specifier).
  */
@@ -1884,10 +1895,10 @@ export interface PolicyRuleDTO {
     id: string;
     effect: PolicyEffect;
     /**
-     * Kind: RemoteExec, Workspace, Harness, Tool (and, from phase 3, App,
-     * Agent, Knowledge, Mcp, Flow, WebFetch).
+     * Kind: what the rule governs (RemoteExec, Workspace, Harness, Tool,
+     * and the usage kinds App, Agent, Knowledge, Mcp, Flow).
      */
-    kind: string;
+    kind: PolicyKind;
     /**
      * Selector narrows the rule to one remote (its id) or a tag (tag:<name>);
      * empty applies everywhere.
@@ -4157,11 +4168,6 @@ export interface TeamDTO extends BaseModelDTO {
      * org it is without belonging to the org workspace.
      */
     org_name?: string;
-    /**
-     * UsagePolicyID of the team's own usage policy ('' = inherit the org's,
-     * or ungoverned when standalone, INF-808).
-     */
-    usage_policy_id?: string;
 }
 /**
  * TeamMemberDTO is the API response for a team member.
@@ -4715,7 +4721,6 @@ export declare const ChannelTypeTelegram: ChannelType;
 export interface ChatData {
     plan_steps: PlanStep[];
     memory: StringEncodedMap;
-    always_allowed_tools: string[];
     /**
      * AllowAllTools runs every tool call in this chat without asking. The
      * person switches it in the chat's settings, and off again at any time.
@@ -5543,6 +5548,46 @@ export declare const NotificationStatusDelivered: NotificationStatus;
 export declare const NotificationStatusFailed: NotificationStatus;
 export declare const NotificationStatusBounced: NotificationStatus;
 export declare const NotificationStatusCancelled: NotificationStatus;
+/**
+ * PolicyEffect is a rule's outcome and a decision's verdict.
+ */
+export type PolicyEffect = "allow" | "ask" | "deny";
+export declare const PolicyEffectAllow: PolicyEffect;
+export declare const PolicyEffectAsk: PolicyEffect;
+export declare const PolicyEffectDeny: PolicyEffect;
+/**
+ * PolicyKind names what a rule governs; each kind has one matcher.
+ */
+export type PolicyKind = "RemoteExec" | "Workspace" | "Harness" | "Tool" | "App" | "Agent" | "Knowledge" | "Mcp" | "Flow" | "WebFetch";
+/**
+ * PolicyKindRemoteExec: shell commands run on a remote.
+ */
+export declare const PolicyKindRemoteExec: PolicyKind;
+/**
+ * PolicyKindWorkspace: folders on a remote.
+ */
+export declare const PolicyKindWorkspace: PolicyKind;
+/**
+ * PolicyKindHarness: a harness's own tool approvals, e.g.
+ * Harness(Bash(git status:*)).
+ */
+export declare const PolicyKindHarness: PolicyKind;
+/**
+ * PolicyKindTool: a tool call our own agent loop makes, by tool name.
+ */
+export declare const PolicyKindTool: PolicyKind;
+/**
+ * Usage kinds (UsageCategory.PolicyKind): rules name resolved ids.
+ */
+export declare const PolicyKindApp: PolicyKind;
+export declare const PolicyKindAgent: PolicyKind;
+export declare const PolicyKindKnowledge: PolicyKind;
+export declare const PolicyKindMcp: PolicyKind;
+export declare const PolicyKindFlow: PolicyKind;
+/**
+ * PolicyKindWebFetch: fetched domains.
+ */
+export declare const PolicyKindWebFetch: PolicyKind;
 /**
  * FunctionKind is how an app function talks to its caller.
  */

package/dist/types.js

@@ -302,9 +302,6 @@ export const ScopeGroupKnowledge = "knowledge";
 export const ScopeGroupArtifacts = "artifacts";
 export const ScopeGroupUser = "user";
 export const ScopeGroupSettings = "settings";
-export const PolicyEffectAllow = "allow";
-export const PolicyEffectAsk = "ask";
-export const PolicyEffectDeny = "deny";
 /**
  * AlwaysAllowScopeExact: this call exactly (each piece of the command,
  * the file, the domain).
@@ -1066,6 +1063,38 @@ export const NotificationStatusDelivered = "delivered";
 export const NotificationStatusFailed = "failed";
 export const NotificationStatusBounced = "bounced";
 export const NotificationStatusCancelled = "cancelled";
+export const PolicyEffectAllow = "allow";
+export const PolicyEffectAsk = "ask";
+export const PolicyEffectDeny = "deny";
+/**
+ * PolicyKindRemoteExec: shell commands run on a remote.
+ */
+export const PolicyKindRemoteExec = "RemoteExec";
+/**
+ * PolicyKindWorkspace: folders on a remote.
+ */
+export const PolicyKindWorkspace = "Workspace";
+/**
+ * PolicyKindHarness: a harness's own tool approvals, e.g.
+ * Harness(Bash(git status:*)).
+ */
+export const PolicyKindHarness = "Harness";
+/**
+ * PolicyKindTool: a tool call our own agent loop makes, by tool name.
+ */
+export const PolicyKindTool = "Tool";
+/**
+ * Usage kinds (UsageCategory.PolicyKind): rules name resolved ids.
+ */
+export const PolicyKindApp = "App";
+export const PolicyKindAgent = "Agent";
+export const PolicyKindKnowledge = "Knowledge";
+export const PolicyKindMcp = "Mcp";
+export const PolicyKindFlow = "Flow";
+/**
+ * PolicyKindWebFetch: fetched domains.
+ */
+export const PolicyKindWebFetch = "WebFetch";
 /**
  * FunctionKindRun takes an input and returns an output (optionally
  * yielding progress on the way). The zero value means this.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inferencesh/sdk",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Official JavaScript/TypeScript SDK for inference.sh - Run AI models with a simple API",
   "type": "module",
   "main": "dist/index.js",