@inferencesh/sdk 0.19.0 → 0.20.0

package/dist/api/tasks.d.ts

@@ -1,6 +1,6 @@
 import { HttpClient } from '../http/client';
 import type { Response } from '../http/response';
-import { TaskDTO as Task, TaskLogsDTO, TaskTimingsDTO, ApiAppRunRequest, TaskResultDTO, CursorListRequest, CursorListResponse } from '../types';
+import { TaskDTO as Task, TaskLogsDTO, TaskTimingsDTO, ApiAppRunRequest, TaskResultDTO, CursorListRequest, CursorListResponse, TaskFileDTO, DeleteTaskFilesResponse } from '../types';
 /** How to follow a task while it runs; see TasksAPI.watch. */
 export interface WatchOptions {
     /** Callback for real-time status updates */
@@ -50,9 +50,21 @@ export declare class TasksAPI {
      */
     create(data: ApiAppRunRequest): Promise<Response<TaskResultDTO>>;
     /**
-     * Delete a task
+     * Delete a task. With `files: true` its input and output files are
+     * deleted too, even when something else still uses them.
      */
-    delete(taskId: string): Promise<Response<void>>;
+    delete(taskId: string, options?: {
+        files?: boolean;
+    }): Promise<Response<void>>;
+    /**
+     * List the files a task consumed and produced. `role` narrows it to one side.
+     */
+    files(taskId: string, role?: 'input' | 'output'): Promise<Response<TaskFileDTO[]>>;
+    /**
+     * Delete a task's files and keep the task. The task must be finished.
+     * A file is deleted even when something else still uses it.
+     */
+    deleteFiles(taskId: string, role?: 'input' | 'output'): Promise<Response<DeleteTaskFilesResponse>>;
     /**
      * Cancel a running task
      */

package/dist/api/tasks.js

@@ -50,10 +50,26 @@ export class TasksAPI {
         return this.http.request('post', '/apps/run', { data });
     }
     /**
-     * Delete a task
+     * Delete a task. With `files: true` its input and output files are
+     * deleted too, even when something else still uses them.
      */
-    async delete(taskId) {
-        return this.http.request('delete', `/tasks/${taskId}`);
+    async delete(taskId, options) {
+        return this.http.request('delete', `/tasks/${taskId}`, {
+            params: options?.files ? { files: true } : undefined,
+        });
+    }
+    /**
+     * List the files a task consumed and produced. `role` narrows it to one side.
+     */
+    async files(taskId, role) {
+        return this.http.request('get', `/tasks/${taskId}/files`, { params: { role } });
+    }
+    /**
+     * Delete a task's files and keep the task. The task must be finished.
+     * A file is deleted even when something else still uses it.
+     */
+    async deleteFiles(taskId, role) {
+        return this.http.request('delete', `/tasks/${taskId}/files`, { params: { role } });
     }
     /**
      * Cancel a running task

package/dist/types.d.ts

@@ -1225,6 +1225,23 @@ export interface AppDTO extends BaseModelDTO, PermissionModelDTO {
     status: AppStatus;
     status_message?: string;
     status_changed_at?: string;
+    /**
+     * ResolvedFunction is the function the requested ref named, when it named
+     * one: "ns/app:fn" in the ref itself, or a route on the name that pins a
+     * function (a retired dialogue app routed to "ns/new-app:dialogue"). Only
+     * set on a lookup by ref; empty means the caller picks, starting from the
+     * version's default.
+     */
+    resolved_function?: string;
+}
+/**
+ * AppUIRef names the artifact an app version renders as its UI: a page a
+ * host shows beside the task in place of the generic output view. Artifact
+ * is a ref ("ns/name", or "ns/name@version" to pin one) or an artifact id;
+ * an unpinned ref follows the artifact's current version.
+ */
+export interface AppUIRef {
+    artifact: string;
 }
 /**
  * AppVersionDTO is the API response for an app version.
@@ -1233,6 +1250,10 @@ export interface AppVersionDTO extends BaseModelDTO {
     metadata: {
         [key: string]: any;
     };
+    /**
+     * UI mirrors metadata.ui so clients need not dig through the map.
+     */
+    ui?: AppUIRef;
     repository: string;
     flow_version_id?: string;
     flow_version?: FlowVersionDTO;
@@ -1706,11 +1727,16 @@ export interface BountyProgramDTO extends BaseModelDTO, PermissionModelDTO {
     max_per_user: number;
     max_per_day: number;
     proof_type: string;
-    proof_min_length: number;
+    /**
+     * ProofForm is the form (namespace/name) a "form" program takes a
+     * submission to as proof; empty for every other proof type.
+     */
+    proof_form: string;
     /**
      * RequiresPaymentMethod withholds the reward until the claimant's team has
-     * a saved payment method. The claim itself is refused with 402
-     * payment_method_required (survey answers are still recorded).
+     * a saved payment method. The claim is refused with 402
+     * payment_method_required and no claim is recorded, so it can be retried
+     * once a card is on file.
      */
     requires_payment_method: boolean;
     status: string;
@@ -1732,7 +1758,10 @@ export interface BountySubmissionDTO extends BaseModelDTO, PermissionModelDTO {
     source?: string;
 }
 /**
- * SubmitBountyRequest is used to claim a bounty reward.
+ * SubmitBountyRequest is used to claim a bounty reward. proof_id names the
+ * proof the program's proof_type asks for: an app (id or namespace/name) for
+ * "app", one of the caller's form submission ids for "form", free text
+ * otherwise.
  */
 export interface SubmitBountyRequest {
     bounty_id: string;
@@ -1876,6 +1905,13 @@ export interface ChatMessageDTO extends BaseModelDTO, PermissionModelDTO {
 export interface PolicyRuleDTO {
     id: string;
     effect: PolicyEffect;
+    /**
+     * Enforcement: default (decides unless a more specific admin layer has
+     * a rule matching the call), enforced (an admin rule that is final),
+     * evaluate (never decides; the decision feed shows what it would have
+     * done) or disabled (kept, ignored).
+     */
+    enforcement: PolicyEnforcement;
     /**
      * Kind: what the rule governs (RemoteExec, Workspace, Harness, Tool,
      * and the usage kinds App, Agent, Knowledge, Mcp, Flow).
@@ -1890,12 +1926,15 @@ export interface PolicyRuleDTO {
      * Specifier is the kind's pattern: a command (`npm test`, `git push:*`),
      * a folder (`~/proj/**`), a harness tool with its pattern
      * (`Bash(git status:*)`, `Edit`), or a loop tool's name. Empty is the
-     * whole kind.
+     * whole kind. A usage kind's names a resource by id, or everything a
+     * publisher owns as publisher:<team id>.
      */
     specifier: string;
     /**
      * Label is the rule in words, e.g. "git commit commands on Laptop", the
-     * same words an approval prompt's "always allow" options use.
+     * same words an approval prompt's "always allow" options use. A usage
+     * rule's is the name it was written with ("bytedance/seedance",
+     * "bytedance/*").
      */
     label: string;
     /**
@@ -2332,17 +2371,63 @@ export interface EntitlementErrorMeta {
     limit?: number;
     current?: number;
     upgrade_available: boolean;
+    requestable: boolean;
+    request_state?: string;
     addon_plan_id?: string;
     addon_plan_name?: string;
     addon_plan_price?: number;
 }
+/**
+ * EntitlementRequestDTO is a team's request for an entitlement, with the
+ * form submission that came with it when there was one, so the admin queue
+ * shows the answers next to the decision.
+ */
+export interface EntitlementRequestDTO extends BaseModelDTO, PermissionModelDTO {
+    resource: EntitlementResource;
+    resource_label?: string;
+    requested: any;
+    submission_id?: string;
+    submission?: FormSubmissionDTO;
+    state: EntitlementRequestState;
+    decided_by?: string;
+    decided_at?: string;
+    note?: string;
+}
+/**
+ * EntitlementRequested is the shape of a request's "requested" field and of
+ * the grant an acceptance makes: a boolean gate switched on, or a limit.
+ */
+export interface EntitlementRequested {
+    type: EntitlementType;
+    enabled?: boolean;
+    limit?: number;
+}
+/**
+ * CreateEntitlementRequestRequest asks for a resource on behalf of the
+ * caller's team. requested defaults to a switched-on boolean gate. form
+ * (namespace/name or id) with data submits that form first and attaches
+ * the submission; the form's own policy and validation errors apply.
+ */
+export interface CreateEntitlementRequestRequest {
+    resource: EntitlementResource;
+    requested?: any;
+    form?: string;
+    data?: any;
+}
+/**
+ * DecideEntitlementRequestRequest is an admin's accept or decline; the note
+ * reaches the requester by email.
+ */
+export interface DecideEntitlementRequestRequest {
+    note?: string;
+}
 /**
  * ErrorCode is the machine-readable error code of an API error: the last
  * segment of the problem+json type URI (https://api.inference.sh/errors/<code>)
  * and APIError.Code on the legacy envelope. Clients branch on these, so a
  * code is a named const here, where it generates into models and the SDKs.
  */
-export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "team_role_required" | "blocked_by_usage_policy" | "last_owner" | "account_deactivated" | "account_banned" | "person_required" | "otp_required" | "mcp_auth_expired" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
+export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "team_role_required" | "blocked_by_usage_policy" | "last_owner" | "account_deactivated" | "account_banned" | "person_required" | "otp_required" | "mcp_auth_expired" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "form_closed" | "already_submitted" | "already_claimed" | "already_entitled" | "request_open" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
 export declare const ErrorCodeInvalidRequest: ErrorCode;
 export declare const ErrorCodeValidationError: ErrorCode;
 export declare const ErrorCodeUnauthorized: ErrorCode;
@@ -2402,6 +2487,23 @@ export declare const ErrorCodePaymentRequired: ErrorCode;
  * PaymentMethodRequiredMeta; clients send the user to BillingPage.
  */
 export declare const ErrorCodePaymentMethodRequired: ErrorCode;
+/**
+ * Form submissions (409): the form is not open, or its submit policy
+ * already holds the caller's submission.
+ */
+export declare const ErrorCodeFormClosed: ErrorCode;
+export declare const ErrorCodeAlreadySubmitted: ErrorCode;
+/**
+ * Bounty claims (409): the caller already claimed this proof, or as many
+ * times as the program allows.
+ */
+export declare const ErrorCodeAlreadyClaimed: ErrorCode;
+/**
+ * Entitlement requests (409): the team already holds the entitlement, or
+ * already has an open request for it.
+ */
+export declare const ErrorCodeAlreadyEntitled: ErrorCode;
+export declare const ErrorCodeRequestOpen: ErrorCode;
 /**
  * Remote harness refusals.
  */
@@ -2457,6 +2559,38 @@ export interface FileDTO extends BaseModelDTO, PermissionModelDTO {
     rating: ContentRating;
     metadata?: FileMetadata;
 }
+/**
+ * TaskFileRole says how a task relates to a file.
+ */
+export type TaskFileRole = "input" | "output";
+export declare const TaskFileRoleInput: TaskFileRole;
+export declare const TaskFileRoleOutput: TaskFileRole;
+/**
+ * TaskFileDTO is one file attached to a task, as GET /tasks/{id}/files lists it.
+ */
+export interface TaskFileDTO {
+    id: string;
+    created_at: string;
+    role: TaskFileRole;
+    uri: string;
+    filename: string;
+    content_type: string;
+    size: number;
+}
+/**
+ * TaskFileSkipped is a file DELETE /tasks/{id}/files left in place.
+ */
+export interface TaskFileSkipped {
+    id: string;
+    reason: string;
+}
+/**
+ * DeleteTaskFilesResponse reports what DELETE /tasks/{id}/files did.
+ */
+export interface DeleteTaskFilesResponse {
+    deleted: string[];
+    skipped: TaskFileSkipped[];
+}
 /**
  * FlowNodeData describes a node's data within a flow
  */
@@ -2739,6 +2873,100 @@ export interface RenameOutputFieldPayload {
     old_field: string;
     new_field: string;
 }
+/**
+ * FormDTO is the API representation of a form: a JSON Schema plus the
+ * settings that say who may submit, and how often.
+ */
+export interface FormDTO extends BaseModelDTO, PermissionModelDTO {
+    namespace: string;
+    name: string;
+    title: string;
+    description: string;
+    schema: any;
+    status: FormStatus;
+    submit_policy: FormSubmitPolicy;
+}
+/**
+ * FormSubmissionDTO is one set of answers to a form.
+ */
+export interface FormSubmissionDTO extends BaseModelDTO, PermissionModelDTO {
+    form_id: string;
+    form_team_id: string;
+    submitter_team_id?: string;
+    data: any;
+    source?: string;
+    agent?: string;
+    context?: string;
+}
+/**
+ * CreateFormRequest creates a form in the caller's team namespace. The name
+ * is the immutable slug behind GET /forms/{namespace}/{name}.
+ */
+export interface CreateFormRequest {
+    name: string;
+    title: string;
+    description?: string;
+    schema?: any;
+    submit_policy?: FormSubmitPolicy;
+    visibility?: Visibility;
+}
+/**
+ * UpdateFormRequest patches a form; nil fields are left as they are.
+ */
+export interface UpdateFormRequest {
+    title?: string;
+    description?: string;
+    schema?: any;
+    status?: FormStatus;
+    submit_policy?: FormSubmitPolicy;
+}
+/**
+ * SubmitFormRequest is one person's answers to a form. data is validated
+ * against the form's schema.
+ */
+export interface SubmitFormRequest {
+    data: any;
+    source?: string;
+    agent?: string;
+    context?: string;
+}
+/**
+ * SubmitFormResponse is returned when a submission was recorded.
+ */
+export interface SubmitFormResponse {
+    submission: FormSubmissionDTO;
+}
+/**
+ * SurveyResponseDTO is the API representation of a survey response.
+ */
+export interface SurveyResponseDTO extends BaseModelDTO, PermissionModelDTO {
+    question_id: string;
+    response: string;
+    agent?: string;
+    source?: string;
+    context?: string;
+}
+/**
+ * SubmitSurveyResponse is returned when submitting a survey answer.
+ * GrantedAmount and RewardBlockedReason are kept for the CLIs that read
+ * them; the alias records answers only, so they are always 0 and empty.
+ * Bounties are claimed through POST /me/bounty.
+ */
+export interface SubmitSurveyResponse {
+    response: SurveyResponseDTO;
+    granted_amount?: number;
+    reward_blocked_reason?: string;
+}
+/**
+ * SubmitSurveyRequest is used to submit a single survey answer.
+ */
+export interface SubmitSurveyRequest {
+    question_id: string;
+    response: string;
+    agent?: string;
+    source?: string;
+    context?: string;
+}
 /**
  * GraphNodeDTO is the API representation of a graph node
  */
@@ -3151,6 +3379,9 @@ export interface ResourceContent {
     mimeType?: string;
     text?: string;
     blob?: string;
+    _meta?: {
+        [key: string]: any;
+    };
 }
 /**
  * ToolCallRequest represents a request to call a tool.
@@ -3861,37 +4092,6 @@ export interface SubscriptionDTO extends BaseModelDTO {
     cancel_at_period_end: boolean;
     credits_per_period: number;
 }
-/**
- * SurveyResponseDTO is the API representation of a survey response.
- */
-export interface SurveyResponseDTO extends BaseModelDTO, PermissionModelDTO {
-    question_id: string;
-    response: string;
-    agent?: string;
-    source?: string;
-    context?: string;
-}
-/**
- * SubmitSurveyResponse is returned when submitting a survey answer.
- * GrantedAmount is the credit reward in microcents (0 if no reward was earned).
- * RewardBlockedReason is set when the answer was recorded but the reward was
- * withheld by policy (see RewardBlockedPaymentMethodRequired).
- */
-export interface SubmitSurveyResponse {
-    response: SurveyResponseDTO;
-    granted_amount?: number;
-    reward_blocked_reason?: string;
-}
-/**
- * SubmitSurveyRequest is used to submit a single survey answer.
- */
-export interface SubmitSurveyRequest {
-    question_id: string;
-    response: string;
-    agent?: string;
-    source?: string;
-    context?: string;
-}
 /**
  * Hardware/System related types
  */
@@ -4360,6 +4560,10 @@ export interface UserRelationDTO {
     created_at: string;
     updated_at: string;
     role: Role;
+    /**
+     * Name is omitted when empty so older generated copies of this DTO stay assignable.
+     */
+    name?: string;
     avatar_url: string;
 }
 /**
@@ -4380,7 +4584,7 @@ export interface UserMetadataDTO {
  * Alias of shared.A2UISurface so the type generation pipeline picks it up.
  */
 export type Widget = A2UISurface;
-export type A2UIComponentType = "Row" | "Column" | "List" | "Text" | "Image" | "Icon" | "Divider" | "Button" | "TextField" | "CheckBox" | "Slider" | "DateTimeInput" | "ChoicePicker" | "Card" | "Modal" | "Tabs" | "Badge" | "Spacer" | "Chart" | "Form" | "Artifact";
+export type A2UIComponentType = "Row" | "Column" | "List" | "Text" | "Image" | "Icon" | "Divider" | "Button" | "TextField" | "CheckBox" | "Slider" | "DateTimeInput" | "ChoicePicker" | "Card" | "Modal" | "Tabs" | "Badge" | "Spacer" | "Chart" | "Form" | "Artifact" | "McpApp";
 export declare const A2UIRow: A2UIComponentType;
 export declare const A2UIColumn: A2UIComponentType;
 export declare const A2UIList: A2UIComponentType;
@@ -4409,6 +4613,12 @@ export declare const A2UIForm: A2UIComponentType;
  * the viewer. Rendered from the artifact's /render endpoint.
  */
 export declare const A2UIArtifact: A2UIComponentType;
+/**
+ * McpApp embeds a remote MCP server's tool page (MCP Apps, SEP-1865): a
+ * sandboxed HTML document the host feeds the tool's input and result over
+ * postMessage, and whose tools/call requests it proxies to the server.
+ */
+export declare const A2UIMcpApp: A2UIComponentType;
 /**
  * A2UIComponent is the universal component representation.
  * Children are string IDs (flat adjacency list), not nested objects.
@@ -4519,6 +4729,59 @@ export interface A2UIComponent {
     artifactTitle?: string;
     artifactUrl?: string;
     artifactFavicon?: string;
+    /**
+     * Extension: McpApp. A remote server's page is named by McpPageHash and
+     * read from GET /mcp-ui-pages/{hash}, so a chat that runs a tool many
+     * times holds one copy of its page, not one per message. McpHtml carries
+     * the page inline instead: an artifact's page, a component written
+     * before pages were stored by hash, or a page that could not be stored.
+     * The server, credential and tool name let the host route the page's
+     * tools/call requests.
+     */
+    mcpHtml?: string;
+    mcpPageHash?: string;
+    mcpCsp?: MCPUICSP;
+    mcpResourceUri?: string;
+    mcpServerSlug?: string;
+    mcpCredentialId?: string;
+    mcpToolName?: string;
+    mcpToolInput?: {
+        [key: string]: any;
+    };
+    mcpToolResult?: A2UIMcpToolResult;
+    mcpPrefersBorder?: boolean;
+    /**
+     * McpArtifactId is set when the page is one of our artifacts (an app's
+     * own UI) rather than a remote server's: the host then serves the page's
+     * runtime calls through the artifact's data endpoints, not /mcps.
+     */
+    mcpArtifactId?: string;
+}
+/**
+ * MCPUICSP is an MCP Apps resource's _meta.ui.csp: the origins the host must
+ * let the page reach, by directive. Lives here rather than in apitypes
+ * because A2UI components carry it and apitypes imports this package.
+ */
+export interface MCPUICSP {
+    connectDomains?: string[];
+    resourceDomains?: string[];
+    frameDomains?: string[];
+    baseUriDomains?: string[];
+}
+/**
+ * A2UIMcpToolResult is the tool result in the shape the page expects
+ * (ui/notifications/tool-result carries a CallToolResult): the content blocks
+ * as the server sent them, not the platform's mapped output.
+ */
+export interface A2UIMcpToolResult {
+    content: {
+        [key: string]: any;
+    }[];
+    structuredContent?: any;
+    isError?: boolean;
+    _meta?: {
+        [key: string]: any;
+    };
 }
 export type A2UIBound = string | number | boolean | A2UIBoundValue;
 /**
@@ -4651,6 +4914,16 @@ export declare const EntitlementScopeMember: EntitlementScope;
 export type EnforcementMode = "block" | "warn";
 export declare const EnforcementBlock: EnforcementMode;
 export declare const EnforcementWarn: EnforcementMode;
+/**
+ * EntitlementRequestState is where a team's request for an entitlement
+ * stands. A team holds at most one open request per resource; an admin
+ * accepts (which grants) or declines it, or the team withdraws it.
+ */
+export type EntitlementRequestState = "open" | "accepted" | "declined" | "withdrawn";
+export declare const EntitlementRequestOpen: EntitlementRequestState;
+export declare const EntitlementRequestAccepted: EntitlementRequestState;
+export declare const EntitlementRequestDeclined: EntitlementRequestState;
+export declare const EntitlementRequestWithdrawn: EntitlementRequestState;
 export type ChatStatus = "busy" | "idle" | "awaiting_input" | "completed";
 export declare const ChatStatusBusy: ChatStatus;
 export declare const ChatStatusIdle: ChatStatus;
@@ -4772,6 +5045,23 @@ export interface ChannelContext {
     channel_type?: ChannelType;
     channel_metadata?: any;
 }
+/**
+ * DescriptionLimit is the most characters a resource's description may have.
+ */
+export type DescriptionLimit = number;
+/**
+ * DescriptionLimitListing bounds the description of an app, agent, flow,
+ * MCP server or knowledge entry. A description is shown in listings and
+ * handed to agents as a suggestion, so it is a sentence or two; anything
+ * longer belongs in the resource itself.
+ */
+export declare const DescriptionLimitListing: DescriptionLimit;
+/**
+ * DescriptionLimitSkill bounds a skill's description. It is the skill's
+ * SKILL.md frontmatter, so it follows the Agent Skills specification
+ * (https://agentskills.io/specification) rather than the listing limit.
+ */
+export declare const DescriptionLimitSkill: DescriptionLimit;
 /**
  * EngineStatus represents the status of an engine.
  */
@@ -4872,6 +5162,31 @@ export interface OutputFieldMapping {
 export type OutputMappings = {
     [key: string]: OutputFieldMapping;
 };
+/**
+ * FormStatus is a form's lifecycle. Only an open form takes submissions.
+ */
+export type FormStatus = "draft" | "open" | "closed";
+export declare const FormStatusDraft: FormStatus;
+export declare const FormStatusOpen: FormStatus;
+export declare const FormStatusClosed: FormStatus;
+/**
+ * FormSubmitPolicy says how many submissions a form takes from one source.
+ */
+export type FormSubmitPolicy = "once_per_user" | "once_per_team" | "many";
+/**
+ * FormSubmitOncePerUser: one submission per person, whichever team they
+ * selected when they answered.
+ */
+export declare const FormSubmitOncePerUser: FormSubmitPolicy;
+/**
+ * FormSubmitOncePerTeam: one submission per team; the submitter's
+ * selected team counts.
+ */
+export declare const FormSubmitOncePerTeam: FormSubmitPolicy;
+/**
+ * FormSubmitMany: no limit.
+ */
+export declare const FormSubmitMany: FormSubmitPolicy;
 /**
  * GateCondition defines a simple boolean condition for gate nodes.
  */
@@ -5310,7 +5625,7 @@ export declare const DeviceTokenKindSession: DeviceTokenKind;
  * TODO: retire once CLIs older than the session-token release are gone.
  */
 export declare const DeviceTokenKindAPIKey: DeviceTokenKind;
-export type EntitlementResource = "api_keys" | "connectors" | "knowledge_bases" | "storage_mb" | "concurrency" | "rate_per_min" | "seats" | "triggers" | "retention_days" | "private_apps" | "task_executions" | "feature:byok" | "feature:seedance" | "feature:marketplace_publish" | "feature:scopes" | "feature:webhooks" | "feature:team_billing" | "feature:auto_recharge" | "feature:invoices" | "feature:publish_apps";
+export type EntitlementResource = "api_keys" | "connectors" | "knowledge_bases" | "storage_mb" | "concurrency" | "rate_per_min" | "seats" | "triggers" | "retention_days" | "private_apps" | "task_executions" | "feature:byok" | "feature:seedance" | "feature:marketplace_publish" | "feature:forms" | "feature:scopes" | "feature:webhooks" | "feature:team_billing" | "feature:auto_recharge" | "feature:invoices" | "feature:publish_apps";
 /**
  * Capacity limits — scale with tier
  */
@@ -5337,6 +5652,10 @@ export declare const ResourceFeatureSeedance: EntitlementResource;
  * Granted per team: the marketplace takes submissions by invitation.
  */
 export declare const ResourceFeatureMarketplacePublish: EntitlementResource;
+/**
+ * Granted per team: creating forms is by invitation for now.
+ */
+export declare const ResourceFeatureForms: EntitlementResource;
 /**
  * Legacy feature gates — kept for DB compatibility, no longer gated
  */
@@ -5474,7 +5793,7 @@ export declare const NotificationPriorityCritical: NotificationPriority;
 /**
  * NotificationType represents the type/category of notification
  */
-export type NotificationType = "low_balance" | "auto_recharge" | "payment_success" | "payment_failed" | "usage_summary" | "spending_limit" | "invoice" | "credit_note" | "subscription_created" | "subscription_credit" | "subscription_canceled" | "subscription_payment_failed" | "subscription_trial_ending" | "welcome" | "welcome_agents" | "welcome_apps" | "welcome_flows" | "welcome_sdk" | "password_reset" | "email_verify" | "security_alert" | "task_complete" | "task_failed" | "data_export" | "system_alert" | "maintenance" | "tos_update" | "service_notice" | "team_invite";
+export type NotificationType = "low_balance" | "auto_recharge" | "payment_success" | "payment_failed" | "usage_summary" | "spending_limit" | "invoice" | "credit_note" | "subscription_created" | "subscription_credit" | "subscription_canceled" | "subscription_payment_failed" | "subscription_trial_ending" | "welcome" | "welcome_agents" | "welcome_apps" | "welcome_flows" | "welcome_sdk" | "password_reset" | "email_verify" | "security_alert" | "task_complete" | "task_failed" | "data_export" | "system_alert" | "maintenance" | "tos_update" | "service_notice" | "team_invite" | "entitlement_request";
 /**
  * Billing notifications
  */
@@ -5522,6 +5841,10 @@ export declare const NotificationTypeServiceNotice: NotificationType;
  * Team notifications
  */
 export declare const NotificationTypeTeamInvite: NotificationType;
+/**
+ * An admin decided the team's entitlement request
+ */
+export declare const NotificationTypeEntitlementRequest: NotificationType;
 /**
  * NotificationStatus represents the status of a notification
  */
@@ -5540,6 +5863,32 @@ export type PolicyEffect = "allow" | "ask" | "deny";
 export declare const PolicyEffectAllow: PolicyEffect;
 export declare const PolicyEffectAsk: PolicyEffect;
 export declare const PolicyEffectDeny: PolicyEffect;
+/**
+ * PolicyEnforcement is how a rule takes part in decisions.
+ */
+export type PolicyEnforcement = "default" | "enforced" | "evaluate" | "disabled";
+/**
+ * PolicyEnforcementDefault: the rule decides in its layer, and a more
+ * specific admin layer with a rule matching the same call overrides it.
+ */
+export declare const PolicyEnforcementDefault: PolicyEnforcement;
+/**
+ * PolicyEnforcementEnforced: an admin (governance) rule that is final.
+ * It is checked before every other layer, and no lower admin layer can
+ * override it; narrow-only layers can still only narrow. Only admin
+ * layers may hold one.
+ */
+export declare const PolicyEnforcementEnforced: PolicyEnforcement;
+/**
+ * PolicyEnforcementEvaluate: the rule never decides. When it would have
+ * changed a decision, the decision feed records what it would have done,
+ * so a rule can be tried before it is switched on.
+ */
+export declare const PolicyEnforcementEvaluate: PolicyEnforcement;
+/**
+ * PolicyEnforcementDisabled: the rule is kept and ignored.
+ */
+export declare const PolicyEnforcementDisabled: PolicyEnforcement;
 /**
  * PolicyKind names what a rule governs; each kind has one matcher.
  */

package/dist/types.js

@@ -395,6 +395,23 @@ export const ErrorCodePaymentRequired = "payment_required";
  * PaymentMethodRequiredMeta; clients send the user to BillingPage.
  */
 export const ErrorCodePaymentMethodRequired = "payment_method_required";
+/**
+ * Form submissions (409): the form is not open, or its submit policy
+ * already holds the caller's submission.
+ */
+export const ErrorCodeFormClosed = "form_closed";
+export const ErrorCodeAlreadySubmitted = "already_submitted";
+/**
+ * Bounty claims (409): the caller already claimed this proof, or as many
+ * times as the program allows.
+ */
+export const ErrorCodeAlreadyClaimed = "already_claimed";
+/**
+ * Entitlement requests (409): the team already holds the entitlement, or
+ * already has an open request for it.
+ */
+export const ErrorCodeAlreadyEntitled = "already_entitled";
+export const ErrorCodeRequestOpen = "request_open";
 /**
  * Remote harness refusals.
  */
@@ -403,6 +420,8 @@ export const ErrorCodeRemoteOffline = "remote_offline";
 export const ErrorCodeRemoteTimeout = "remote_timeout";
 export const ErrorCodeHarnessNotDrivable = "harness_not_drivable";
 export const ErrorCodeHarnessTooOld = "harness_too_old";
+export const TaskFileRoleInput = "input";
+export const TaskFileRoleOutput = "output";
 /**
  * Flow graph action type constants.
  */
@@ -553,6 +572,12 @@ export const A2UIForm = "Form";
  * the viewer. Rendered from the artifact's /render endpoint.
  */
 export const A2UIArtifact = "Artifact";
+/**
+ * McpApp embeds a remote MCP server's tool page (MCP Apps, SEP-1865): a
+ * sandboxed HTML document the host feeds the tool's input and result over
+ * postMessage, and whose tools/call requests it proxies to the server.
+ */
+export const A2UIMcpApp = "McpApp";
 /**
  * ApiKeyScopeUser is a personal key: it acts as the person who created it,
  * in the workspace it was created in, and ends when they can no longer
@@ -622,6 +647,10 @@ export const EntitlementScopeTeam = "team";
 export const EntitlementScopeMember = "member";
 export const EnforcementBlock = "block";
 export const EnforcementWarn = "warn";
+export const EntitlementRequestOpen = "open";
+export const EntitlementRequestAccepted = "accepted";
+export const EntitlementRequestDeclined = "declined";
+export const EntitlementRequestWithdrawn = "withdrawn";
 export const ChatStatusBusy = "busy";
 export const ChatStatusIdle = "idle";
 export const ChatStatusAwaitingInput = "awaiting_input";
@@ -662,6 +691,19 @@ export const ChannelTypeDiscord = "discord";
 export const ChannelTypeTeams = "teams";
 export const ChannelTypeTelegram = "telegram";
 export const ChatEventTypeHook = "hook";
+/**
+ * DescriptionLimitListing bounds the description of an app, agent, flow,
+ * MCP server or knowledge entry. A description is shown in listings and
+ * handed to agents as a suggestion, so it is a sentence or two; anything
+ * longer belongs in the resource itself.
+ */
+export const DescriptionLimitListing = 200;
+/**
+ * DescriptionLimitSkill bounds a skill's description. It is the skill's
+ * SKILL.md frontmatter, so it follows the Agent Skills specification
+ * (https://agentskills.io/specification) rather than the listing limit.
+ */
+export const DescriptionLimitSkill = 1024;
 export const EngineStatusRunning = "running";
 export const EngineStatusPending = "pending";
 export const EngineStatusDraining = "draining";
@@ -679,6 +721,23 @@ export const FlowRunStatusRunning = 2;
 export const FlowRunStatusCompleted = 3;
 export const FlowRunStatusFailed = 4;
 export const FlowRunStatusCancelled = 5;
+export const FormStatusDraft = "draft";
+export const FormStatusOpen = "open";
+export const FormStatusClosed = "closed";
+/**
+ * FormSubmitOncePerUser: one submission per person, whichever team they
+ * selected when they answered.
+ */
+export const FormSubmitOncePerUser = "once_per_user";
+/**
+ * FormSubmitOncePerTeam: one submission per team; the submitter's
+ * selected team counts.
+ */
+export const FormSubmitOncePerTeam = "once_per_team";
+/**
+ * FormSubmitMany: no limit.
+ */
+export const FormSubmitMany = "many";
 export const GraphNodeTypeUnknown = "unknown";
 export const GraphNodeTypeJoin = "join";
 export const GraphNodeTypeSplit = "split";
@@ -911,6 +970,10 @@ export const ResourceFeatureSeedance = "feature:seedance";
  * Granted per team: the marketplace takes submissions by invitation.
  */
 export const ResourceFeatureMarketplacePublish = "feature:marketplace_publish";
+/**
+ * Granted per team: creating forms is by invitation for now.
+ */
+export const ResourceFeatureForms = "feature:forms";
 /**
  * Legacy feature gates — kept for DB compatibility, no longer gated
  */
@@ -1060,6 +1123,10 @@ export const NotificationTypeServiceNotice = "service_notice";
  * Team notifications
  */
 export const NotificationTypeTeamInvite = "team_invite";
+/**
+ * An admin decided the team's entitlement request
+ */
+export const NotificationTypeEntitlementRequest = "entitlement_request";
 export const NotificationStatusPending = "pending";
 export const NotificationStatusProcessing = "processing";
 export const NotificationStatusSent = "sent";
@@ -1070,6 +1137,28 @@ export const NotificationStatusCancelled = "cancelled";
 export const PolicyEffectAllow = "allow";
 export const PolicyEffectAsk = "ask";
 export const PolicyEffectDeny = "deny";
+/**
+ * PolicyEnforcementDefault: the rule decides in its layer, and a more
+ * specific admin layer with a rule matching the same call overrides it.
+ */
+export const PolicyEnforcementDefault = "default";
+/**
+ * PolicyEnforcementEnforced: an admin (governance) rule that is final.
+ * It is checked before every other layer, and no lower admin layer can
+ * override it; narrow-only layers can still only narrow. Only admin
+ * layers may hold one.
+ */
+export const PolicyEnforcementEnforced = "enforced";
+/**
+ * PolicyEnforcementEvaluate: the rule never decides. When it would have
+ * changed a decision, the decision feed records what it would have done,
+ * so a rule can be tried before it is switched on.
+ */
+export const PolicyEnforcementEvaluate = "evaluate";
+/**
+ * PolicyEnforcementDisabled: the rule is kept and ignored.
+ */
+export const PolicyEnforcementDisabled = "disabled";
 /**
  * PolicyKindRemoteExec: shell commands run on a remote.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inferencesh/sdk",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Official JavaScript/TypeScript SDK for inference.sh - Run AI models with a simple API",
   "type": "module",
   "main": "dist/index.js",
@@ -92,7 +92,7 @@
     "globals": "^17.12.0",
     "hono": "^4.13.1",
     "jest": "^30.4.2",
-    "next": "^16.2.6",
+    "next": "^16.3.6",
     "prettier": "^3.6.2",
     "react": "^19.2.3",
     "rimraf": "^6.0.1",