@inferencesh/sdk 0.17.0 → 0.19.0

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.18.0] - 2026-10-04
+
+### Added
+
+- `AgentPermissions` and `permissions` on agent configs: what an agent's new chats may do without asking (`allow_all_tools`).
+- `PolicyKind` (`RemoteExec`, `Workspace`, `Harness`, `Tool`, `WebFetch`, and the usage kinds `App`, `Agent`, `Knowledge`, `Mcp`, `Flow`) with its constants. `PolicyRuleDTO.kind` is a `PolicyKind`.
+
+### Removed
+
+- `ChatData.always_allowed_tools`. A chat's always-allow list became chat rules (`GET /chats/{id}/rules`); the api no longer sends it.
+- `TeamDTO.usage_policy_id`. A workspace's usage policy is a policy attached to it; the org's workspace list carries it.
+
 ## [0.17.0] - 2026-10-02
 
 ### Changed

package/README.md

@@ -557,7 +557,6 @@ Runs a task on inference.sh.
 | `params.input` | `object` | Yes | Input parameters for the app |
 | `params.setup` | `object` | No | Setup parameters (affects worker warmth/scheduling) |
 | `params.infra` | `string` | No | Infrastructure: `'cloud'` or `'private'` |
-| `params.variant` | `string` | No | App variant to use |
 | `params.session` | `string` | No | Session ID or `'new'` to start a new session |
 | `params.session_timeout` | `number` | No | Session timeout in seconds (1-3600, only with `session: 'new'`) |
 

package/dist/types.d.ts

@@ -18,6 +18,22 @@ export interface InternalToolsConfig {
     remote?: boolean;
     knowledge?: boolean;
 }
+/**
+ * AgentPermissions is what an agent's new chats in its own workspace may do
+ * without asking (INF-906). Each is copied into such a chat when it is
+ * created; the chat owns it from then on. Chats other workspaces start with
+ * the agent get none of it: they run on their own remotes and tools. A team
+ * or org policy still asks or denies over it.
+ */
+export interface AgentPermissions {
+    /**
+     * AllowAllTools starts each new chat with "allow every tool" on: loop
+     * tools, harness tools and remote_exec commands run without asking. For
+     * agents nobody watches (webhook and cron runs), where an approval would
+     * stall the run.
+     */
+    allow_all_tools?: boolean;
+}
 /**
  * AgentTool represents a unified tool that can be used by an agent
  */
@@ -254,6 +270,7 @@ export interface AgentVersionDTO extends BaseModelDTO, PermissionModelDTO {
     skills: SkillConfig[];
     context?: ContextField[];
     internal_tools?: InternalToolsConfig;
+    permissions?: AgentPermissions;
     hooks?: LifecycleHookConfig[];
     output_schema?: any;
 }
@@ -287,6 +304,7 @@ export interface AgentConfigInput {
     skills?: SkillConfig[];
     context?: ContextField[];
     internal_tools?: InternalToolsConfig;
+    permissions?: AgentPermissions;
     hooks?: LifecycleHookConfig[];
     output_schema?: any;
 }
@@ -443,9 +461,6 @@ export interface AppVersionInput {
         [key: string]: AppFunction;
     };
     default_function?: string;
-    variants?: {
-        [key: string]: AppVariant;
-    };
     env?: {
         [key: string]: string;
     };
@@ -1152,18 +1167,6 @@ export interface AppResources {
     gpu: AppGPUResource;
     ram: number;
 }
-/**
- * AppVariant is a named resource/env configuration variant.
- */
-export interface AppVariant {
-    name: string;
-    order: number;
-    resources: AppResources;
-    env: {
-        [key: string]: string;
-    };
-    python: string;
-}
 /**
  * SecretRequirement defines a secret that an app requires to run.
  */
@@ -1240,9 +1243,6 @@ export interface AppVersionDTO extends BaseModelDTO {
         [key: string]: AppFunction;
     };
     default_function?: string;
-    variants: {
-        [key: string]: AppVariant;
-    };
     env: {
         [key: string]: string;
     };
@@ -1870,13 +1870,6 @@ export interface ChatMessageDTO extends BaseModelDTO, PermissionModelDTO {
     tool_call_id?: string;
     tool_invocations?: ToolInvocationDTO[];
 }
-/**
- * PolicyEffect is a rule's outcome: allow, ask or deny.
- */
-export type PolicyEffect = "allow" | "ask" | "deny";
-export declare const PolicyEffectAllow: PolicyEffect;
-export declare const PolicyEffectAsk: PolicyEffect;
-export declare const PolicyEffectDeny: PolicyEffect;
 /**
  * PolicyRuleDTO is one rule, typed form Kind[selector](specifier).
  */
@@ -1884,10 +1877,10 @@ export interface PolicyRuleDTO {
     id: string;
     effect: PolicyEffect;
     /**
-     * Kind: RemoteExec, Workspace, Harness, Tool (and, from phase 3, App,
-     * Agent, Knowledge, Mcp, Flow, WebFetch).
+     * Kind: what the rule governs (RemoteExec, Workspace, Harness, Tool,
+     * and the usage kinds App, Agent, Knowledge, Mcp, Flow).
      */
-    kind: string;
+    kind: PolicyKind;
     /**
      * Selector narrows the rule to one remote (its id) or a tag (tag:<name>);
      * empty applies everywhere.
@@ -4042,7 +4035,6 @@ export interface TaskDTO extends BaseModelDTO, PermissionModelDTO {
     app?: AppDTO;
     app_version_id: string;
     app_version?: AppVersionDTO;
-    app_variant: string;
     function: string;
     infra: Infra;
     workers: string[];
@@ -4157,11 +4149,6 @@ export interface TeamDTO extends BaseModelDTO {
      * org it is without belonging to the org workspace.
      */
     org_name?: string;
-    /**
-     * UsagePolicyID of the team's own usage policy ('' = inherit the org's,
-     * or ungoverned when standalone, INF-808).
-     */
-    usage_policy_id?: string;
 }
 /**
  * TeamMemberDTO is the API response for a team member.
@@ -4715,7 +4702,6 @@ export declare const ChannelTypeTelegram: ChannelType;
 export interface ChatData {
     plan_steps: PlanStep[];
     memory: StringEncodedMap;
-    always_allowed_tools: string[];
     /**
      * AllowAllTools runs every tool call in this chat without asking. The
      * person switches it in the chat's settings, and off again at any time.
@@ -5324,7 +5310,7 @@ export declare const DeviceTokenKindSession: DeviceTokenKind;
  * TODO: retire once CLIs older than the session-token release are gone.
  */
 export declare const DeviceTokenKindAPIKey: DeviceTokenKind;
-export type EntitlementResource = "api_keys" | "connectors" | "knowledge_bases" | "storage_mb" | "concurrency" | "rate_per_min" | "seats" | "triggers" | "retention_days" | "private_apps" | "task_executions" | "feature:byok" | "feature:seedance" | "feature:scopes" | "feature:webhooks" | "feature:team_billing" | "feature:auto_recharge" | "feature:invoices" | "feature:publish_apps";
+export type EntitlementResource = "api_keys" | "connectors" | "knowledge_bases" | "storage_mb" | "concurrency" | "rate_per_min" | "seats" | "triggers" | "retention_days" | "private_apps" | "task_executions" | "feature:byok" | "feature:seedance" | "feature:marketplace_publish" | "feature:scopes" | "feature:webhooks" | "feature:team_billing" | "feature:auto_recharge" | "feature:invoices" | "feature:publish_apps";
 /**
  * Capacity limits — scale with tier
  */
@@ -5347,6 +5333,10 @@ export declare const ResourceTaskExecutions: EntitlementResource;
  */
 export declare const ResourceFeatureBYOK: EntitlementResource;
 export declare const ResourceFeatureSeedance: EntitlementResource;
+/**
+ * Granted per team: the marketplace takes submissions by invitation.
+ */
+export declare const ResourceFeatureMarketplacePublish: EntitlementResource;
 /**
  * Legacy feature gates — kept for DB compatibility, no longer gated
  */
@@ -5543,6 +5533,46 @@ export declare const NotificationStatusDelivered: NotificationStatus;
 export declare const NotificationStatusFailed: NotificationStatus;
 export declare const NotificationStatusBounced: NotificationStatus;
 export declare const NotificationStatusCancelled: NotificationStatus;
+/**
+ * PolicyEffect is a rule's outcome and a decision's verdict.
+ */
+export type PolicyEffect = "allow" | "ask" | "deny";
+export declare const PolicyEffectAllow: PolicyEffect;
+export declare const PolicyEffectAsk: PolicyEffect;
+export declare const PolicyEffectDeny: PolicyEffect;
+/**
+ * PolicyKind names what a rule governs; each kind has one matcher.
+ */
+export type PolicyKind = "RemoteExec" | "Workspace" | "Harness" | "Tool" | "App" | "Agent" | "Knowledge" | "Mcp" | "Flow" | "WebFetch";
+/**
+ * PolicyKindRemoteExec: shell commands run on a remote.
+ */
+export declare const PolicyKindRemoteExec: PolicyKind;
+/**
+ * PolicyKindWorkspace: folders on a remote.
+ */
+export declare const PolicyKindWorkspace: PolicyKind;
+/**
+ * PolicyKindHarness: a harness's own tool approvals, e.g.
+ * Harness(Bash(git status:*)).
+ */
+export declare const PolicyKindHarness: PolicyKind;
+/**
+ * PolicyKindTool: a tool call our own agent loop makes, by tool name.
+ */
+export declare const PolicyKindTool: PolicyKind;
+/**
+ * Usage kinds (UsageCategory.PolicyKind): rules name resolved ids.
+ */
+export declare const PolicyKindApp: PolicyKind;
+export declare const PolicyKindAgent: PolicyKind;
+export declare const PolicyKindKnowledge: PolicyKind;
+export declare const PolicyKindMcp: PolicyKind;
+export declare const PolicyKindFlow: PolicyKind;
+/**
+ * PolicyKindWebFetch: fetched domains.
+ */
+export declare const PolicyKindWebFetch: PolicyKind;
 /**
  * FunctionKind is how an app function talks to its caller.
  */

package/dist/types.js

@@ -302,9 +302,6 @@ export const ScopeGroupKnowledge = "knowledge";
 export const ScopeGroupArtifacts = "artifacts";
 export const ScopeGroupUser = "user";
 export const ScopeGroupSettings = "settings";
-export const PolicyEffectAllow = "allow";
-export const PolicyEffectAsk = "ask";
-export const PolicyEffectDeny = "deny";
 /**
  * AlwaysAllowScopeExact: this call exactly (each piece of the command,
  * the file, the domain).
@@ -910,6 +907,10 @@ export const ResourceTaskExecutions = "task_executions";
  */
 export const ResourceFeatureBYOK = "feature:byok";
 export const ResourceFeatureSeedance = "feature:seedance";
+/**
+ * Granted per team: the marketplace takes submissions by invitation.
+ */
+export const ResourceFeatureMarketplacePublish = "feature:marketplace_publish";
 /**
  * Legacy feature gates — kept for DB compatibility, no longer gated
  */
@@ -1066,6 +1067,38 @@ export const NotificationStatusDelivered = "delivered";
 export const NotificationStatusFailed = "failed";
 export const NotificationStatusBounced = "bounced";
 export const NotificationStatusCancelled = "cancelled";
+export const PolicyEffectAllow = "allow";
+export const PolicyEffectAsk = "ask";
+export const PolicyEffectDeny = "deny";
+/**
+ * PolicyKindRemoteExec: shell commands run on a remote.
+ */
+export const PolicyKindRemoteExec = "RemoteExec";
+/**
+ * PolicyKindWorkspace: folders on a remote.
+ */
+export const PolicyKindWorkspace = "Workspace";
+/**
+ * PolicyKindHarness: a harness's own tool approvals, e.g.
+ * Harness(Bash(git status:*)).
+ */
+export const PolicyKindHarness = "Harness";
+/**
+ * PolicyKindTool: a tool call our own agent loop makes, by tool name.
+ */
+export const PolicyKindTool = "Tool";
+/**
+ * Usage kinds (UsageCategory.PolicyKind): rules name resolved ids.
+ */
+export const PolicyKindApp = "App";
+export const PolicyKindAgent = "Agent";
+export const PolicyKindKnowledge = "Knowledge";
+export const PolicyKindMcp = "Mcp";
+export const PolicyKindFlow = "Flow";
+/**
+ * PolicyKindWebFetch: fetched domains.
+ */
+export const PolicyKindWebFetch = "WebFetch";
 /**
  * FunctionKindRun takes an input and returns an output (optionally
  * yielding progress on the way). The zero value means this.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inferencesh/sdk",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Official JavaScript/TypeScript SDK for inference.sh - Run AI models with a simple API",
   "type": "module",
   "main": "dist/index.js",