@inferencesh/sdk 0.28.0 → 0.29.1

package/CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.29.0] - 2026-10-17
+
+### Removed
+- `CredentialConfigDTO.provider_info` is gone: read `company` (INF-1079). The API stopped sending it in api-v1313.
+
+### Changed
+- `CredentialConfigDTO.auth_scheme_id` is `auth_provider_id`, matching the API (INF-1079).
+- Generated types follow the API: engine release targets (`client.engines.updateBinary` takes a release target, `releases()` lists channel heads), `EngineDTO.capabilities` (`EngineCapability`, `EngineCapabilities`), `ChatMessageDTO.compaction_meta`.
+
+### Fixed
+- Partial chat and run stream updates merge instead of replacing, and streamed text never blinks back to an older copy.
+- A read that got no response is sent again, twice.
+
 ## [0.28.0] - 2026-10-15
 
 ### Changed

package/dist/agent/actions.js

@@ -12,6 +12,7 @@ import { createLLMDeltaAccumulator } from '../delta.js';
 import { isAdHocConfig, extractClientToolHandlers } from './types.js';
 import * as api from './api.js';
 import { buildMCPInputResult } from './mcp-input.js';
+import { applyChatUpdate } from './reducer.js';
 import { isInferenceError } from '../http/errors.js';
 // =============================================================================
 // Action Creators
@@ -226,11 +227,16 @@ export function createActions(ctx) {
             },
         });
         // Listen for Chat object updates (status changes only — don't replace messages)
-        manager.addEventListener('chats', (chatData) => {
-            dispatch({ type: 'UPDATE_CHAT', payload: chatData });
-            if (chatData) {
-                callbacks.onStatusChange?.(isChatBusy(chatData) ? 'streaming' : 'idle');
-                checkTurnEnd(chatData);
+        manager.addEventListener('chats', (chatData, fields) => {
+            if (!chatData)
+                return;
+            dispatch({ type: 'UPDATE_CHAT', payload: chatData, fields });
+            // A partial update (a plan step writing agent_data) says nothing about
+            // the turn on its own: judge the chat it merges into.
+            const chat = applyChatUpdate(getState().chat, chatData, fields);
+            if (chat) {
+                callbacks.onStatusChange?.(isChatBusy(chat) ? 'streaming' : 'idle');
+                checkTurnEnd(chat);
             }
         });
         // Listen for ChatMessage updates
@@ -244,8 +250,11 @@ export function createActions(ctx) {
             updateMessage(message, fields);
         });
         // Listen for AgentRun updates (state transitions, output)
-        manager.addEventListener('agent_runs', (run) => {
-            dispatch({ type: 'UPDATE_ACTIVE_RUN', payload: run });
+        manager.addEventListener('agent_runs', (run, fields) => {
+            dispatch({ type: 'UPDATE_ACTIVE_RUN', payload: run, fields });
+            // A partial update (the run's output) carries no state.
+            if (fields)
+                return;
             callbacks.onStatusChange?.(isRunWorking(run.state) || isRunInterrupted(run.state) ? 'streaming' : 'idle');
             const currentChat = getState().chat;
             if (currentChat)
@@ -566,6 +575,7 @@ export function createActions(ctx) {
                 throw error;
             }
         },
+        listRunInterrupts: (runId) => api.listRunInterrupts(client, runId),
         loadOlderMessages: async () => {
             const chatId = getChatId();
             const cursor = getState().messageCursor;

package/dist/agent/reducer.d.ts

@@ -3,6 +3,12 @@
  *
  * Pure reducer for managing agent chat state.
  */
+import type { ChatDTO } from '../types.js';
 import type { AgentChatState, ChatAction } from './types.js';
+/**
+ * The chat after a chats event: replaced by a full one, merged with a partial
+ * one. A partial update to another chat (or before any chat) is dropped.
+ */
+export declare function applyChatUpdate(existing: ChatDTO | null, update: ChatDTO, fields?: string[]): ChatDTO | null;
 export declare const initialState: AgentChatState;
 export declare function chatReducer(state: AgentChatState, action: ChatAction): AgentChatState;

package/dist/agent/reducer.js

@@ -4,7 +4,7 @@
  * Pure reducer for managing agent chat state.
  */
 import { ChatStatusBusy, ChatStatusAwaitingInput, ChatStatusIdle } from '../types.js';
-import { isRunInterrupted, isRunWorking } from '../utils.js';
+import { isMessageTerminal, isRunInterrupted, isRunWorking } from '../utils.js';
 function deriveChatStatus(run) {
     if (!run)
         return ChatStatusIdle;
@@ -14,6 +14,38 @@ function deriveChatStatus(run) {
         return ChatStatusAwaitingInput;
     return ChatStatusIdle;
 }
+/**
+ * A partial stream update (`fields` set) carries only the fields it names, so
+ * it merges into the object it updates instead of replacing it: a chat update
+ * naming only agent_data (a plan step) keeps the chat's status and active run.
+ * A named field missing from the payload was cleared (omitempty).
+ */
+function mergeFields(existing, update, fields) {
+    const merged = { ...existing };
+    for (const field of fields)
+        merged[field] = update[field];
+    return merged;
+}
+/**
+ * The chat after a chats event: replaced by a full one, merged with a partial
+ * one. A partial update to another chat (or before any chat) is dropped.
+ */
+export function applyChatUpdate(existing, update, fields) {
+    if (!fields)
+        return update;
+    if (!existing || existing.id !== update.id)
+        return existing;
+    const merged = mergeFields(existing, update, fields);
+    // The projector's update names active_run_id, which ChatDTO does not
+    // declare. The run object belongs to that id: a new or cleared active run
+    // drops it until the run's own event arrives.
+    if (fields.includes('active_run_id')) {
+        const runId = update.active_run_id;
+        if (merged.active_run && merged.active_run.id !== runId)
+            merged.active_run = undefined;
+    }
+    return merged;
+}
 /**
  * Every message enters state through here. The API serializes a message with
  * no content as `content: null` (a nil Go slice), and a partial stream update
@@ -27,6 +59,28 @@ function normalizeMessage(message, existing) {
         return message;
     return { ...message, content: existing?.content ?? [] };
 }
+/**
+ * Streamed text only grows until the message is done. Deltas build the text
+ * locally, while a message update carries the server's saved copy, which can
+ * lag behind them (often still empty). Taking that copy as-is blanks the text
+ * until the next delta, so while the message is still generating, a text
+ * that is an earlier version of what is shown keeps what is shown. Once the
+ * message is terminal the server's copy is final and wins.
+ */
+function keepStreamedText(updated, existing) {
+    if (isMessageTerminal(updated.status))
+        return updated;
+    const shown = existing.content.find((c) => c.type === 'text')?.text;
+    if (!shown)
+        return updated;
+    const incoming = updated.content.find((c) => c.type === 'text');
+    if (incoming?.text && !shown.startsWith(incoming.text))
+        return updated;
+    const content = incoming
+        ? updated.content.map((c) => (c === incoming ? { ...c, text: shown } : c))
+        : [{ type: 'text', text: shown }, ...updated.content];
+    return { ...updated, content };
+}
 const normalizeMessages = (messages) => messages.map((m) => normalizeMessage(m));
 // =============================================================================
 // Initial State
@@ -59,10 +113,10 @@ export function chatReducer(state, action) {
         }
         case 'UPDATE_CHAT': {
             // Update chat metadata without replacing messages
-            const chat = action.payload;
-            if (!chat)
+            if (!action.payload)
                 return state;
-            return { ...state, chat };
+            const chat = applyChatUpdate(state.chat, action.payload, action.fields);
+            return chat === state.chat ? state : { ...state, chat };
         }
         // The settings and set-agent endpoints answer with only what they wrote.
         // Merge it into the chat it belongs to; a chat switched away from in the
@@ -104,7 +158,15 @@ export function chatReducer(state, action) {
         case 'UPDATE_ACTIVE_RUN': {
             if (!state.chat)
                 return state;
-            return { ...state, chat: { ...state.chat, active_run: action.payload, status: deriveChatStatus(action.payload) } };
+            let run = action.payload;
+            if (action.fields) {
+                // A partial update (the run's output) needs the run it belongs to.
+                const existing = state.chat.active_run;
+                if (!existing || existing.id !== run.id)
+                    return state;
+                run = mergeFields(existing, run, action.fields);
+            }
+            return { ...state, chat: { ...state.chat, active_run: run, status: deriveChatStatus(run) } };
         }
         case 'SET_MESSAGES':
             return { ...state, messages: normalizeMessages(action.payload) };
@@ -120,9 +182,7 @@ export function chatReducer(state, action) {
             const existingIndex = state.messages.findIndex((m) => m.id === message.id);
             if (existingIndex !== -1) {
                 const existing = state.messages[existingIndex];
-                const updated = action.partial
-                    ? normalizeMessage({ ...existing, ...message }, existing)
-                    : normalizeMessage(message);
+                const updated = keepStreamedText(action.partial ? normalizeMessage({ ...existing, ...message }, existing) : normalizeMessage(message), existing);
                 if (existing === updated)
                     return state;
                 const newMessages = [...state.messages];
@@ -148,6 +208,10 @@ export function chatReducer(state, action) {
             if (!target)
                 return state;
             const textBlock = target.content.find(c => c.type === 'text');
+            // Deltas from a stream joined mid-message start partway; the message
+            // update already showed more, so keep it until they catch up.
+            if (textBlock?.text && textBlock.text.startsWith(output.response ?? ''))
+                return state;
             const newContent = textBlock
                 ? target.content.map(c => c.type === 'text' ? { ...c, text: output.response } : c)
                 : [{ type: 'text', text: output.response }, ...target.content];

package/dist/agent/types.d.ts

@@ -4,7 +4,7 @@
  * Public types for the Agent chat module.
  */
 import type { Dispatch } from 'react';
-import type { AgentRunDTO, AgentVersionDTO, AlwaysAllowOptionsDTO, AlwaysAllowResultDTO, ToolExplanationDTO, ChatAgentDTO, ChatDTO, ChatMessageDTO, ChatSettingsDTO, ChatSettingsRequest, AgentTool, AgentConfigInput as GeneratedAgentConfig, CoreAppConfigInput as CoreAppConfig, FileRef, ElicitResult } from '../types.js';
+import type { AgentRunDTO, AgentVersionDTO, AlwaysAllowOptionsDTO, AlwaysAllowResultDTO, ToolExplanationDTO, ChatAgentDTO, ChatDTO, ChatMessageDTO, ChatSettingsDTO, ChatSettingsRequest, AgentTool, AgentConfigInput as GeneratedAgentConfig, CoreAppConfigInput as CoreAppConfig, FileRef, ElicitResult, InterruptDTO } from '../types.js';
 import type { HttpClient } from '../http/client.js';
 import type { ClientToolResult } from '../tool-builder.js';
 import type { StreamableManager } from '../http/streamable.js';
@@ -190,6 +190,8 @@ export interface AgentChatActions {
      * `requires_sign_in` (ErrorCodeRequiresSignIn).
      */
     resolveInterrupt: (interruptId: string, decision: 'allow' | 'deny') => Promise<void>;
+    /** A run's pending interrupts (`heldTurn` finds a held turn among them). */
+    listRunInterrupts: (runId: string) => Promise<InterruptDTO[]>;
     /** Load older messages (scroll-up pagination). Returns true if more exist. */
     loadOlderMessages: () => Promise<boolean>;
     /** Whether there are older messages to load */
@@ -261,6 +263,7 @@ export type ChatAction = {
 } | {
     type: 'UPDATE_CHAT';
     payload: ChatDTO | null;
+    fields?: string[];
 } | {
     type: 'MERGE_CHAT_SETTINGS';
     payload: ChatSettingsDTO;
@@ -270,6 +273,7 @@ export type ChatAction = {
 } | {
     type: 'UPDATE_ACTIVE_RUN';
     payload: AgentRunDTO;
+    fields?: string[];
 } | {
     type: 'SET_MESSAGES';
     payload: ChatMessageDTO[];

package/dist/api/engines.d.ts

@@ -1,7 +1,7 @@
 import { HttpClient } from '../http/client.js';
 import type { Response } from '../http/response.js';
 import type { EngineUpdateBody } from './write-bodies.js';
-import { EngineDTO as Engine, CursorListRequest, CursorListResponse } from '../types.js';
+import { EngineDTO as Engine, EngineReleasesResponse, CursorListRequest, CursorListResponse } from '../types.js';
 /**
  * Engines API
  */
@@ -65,8 +65,16 @@ export declare class EnginesAPI {
      */
     drain(engineId: string): Promise<Response<void>>;
     /**
-     * Update an engine binary (drain + restart with new version)
+     * Update an engine binary: it drains, installs the release and restarts.
+     * `version` is "stable" (the default: newest stable, lifting any pin),
+     * "canary" (the current canary build, pinned), or a version such as
+     * v1.9.3 (pinned). A pinned engine stays on its version until sent
+     * "stable" again.
      */
-    updateBinary(engineId: string): Promise<Response<void>>;
+    updateBinary(engineId: string, version?: string): Promise<Response<void>>;
+    /**
+     * The head of each engine release channel (stable, canary) on dist.inference.sh.
+     */
+    releases(): Promise<Response<EngineReleasesResponse>>;
 }
 export declare function createEnginesAPI(http: HttpClient): EnginesAPI;

package/dist/api/engines.js

@@ -85,10 +85,21 @@ export class EnginesAPI {
         return this.http.request('post', `/engines/${engineId}/drain`);
     }
     /**
-     * Update an engine binary (drain + restart with new version)
+     * Update an engine binary: it drains, installs the release and restarts.
+     * `version` is "stable" (the default: newest stable, lifting any pin),
+     * "canary" (the current canary build, pinned), or a version such as
+     * v1.9.3 (pinned). A pinned engine stays on its version until sent
+     * "stable" again.
      */
-    async updateBinary(engineId) {
-        return this.http.request('post', `/engines/${engineId}/update`);
+    async updateBinary(engineId, version) {
+        const body = version ? { version } : {};
+        return this.http.request('post', `/engines/${engineId}/update`, { data: body });
+    }
+    /**
+     * The head of each engine release channel (stable, canary) on dist.inference.sh.
+     */
+    async releases() {
+        return this.http.request('get', '/engines/releases');
     }
 }
 export function createEnginesAPI(http) {

package/dist/api/tasks.js

@@ -1,6 +1,6 @@
 import { streamUntilTerminal } from '../http/stream-until-terminal.js';
 import { PollManager } from '../http/poll.js';
-import { TaskStatusCompleted, TaskStatusFailed, TaskStatusCancelled, } from '../types.js';
+import { TaskStatusCompleted, TaskStatusFailed, TaskStatusCancelled, TaskStatusRejected, } from '../types.js';
 import { parseStatus } from '../utils.js';
 //TODO: This is ugly...
 function stripTask(task) {
@@ -28,6 +28,9 @@ function settleTerminal(data, stripped, settle) {
         case TaskStatusCancelled:
             settle.reject(new Error('task cancelled'));
             break;
+        case TaskStatusRejected:
+            settle.reject(new Error(data.error || 'task rejected'));
+            break;
     }
 }
 /**

package/dist/http/client.js

@@ -1,6 +1,40 @@
 import { InferenceError, RequirementsNotMetException } from './errors.js';
 import { EventSource } from 'eventsource';
 import { SDK_VERSION } from '../version.js';
+/** How long to wait before each new try of a read that got no response. */
+const NETWORK_RETRY_DELAYS_MS = [300, 1000];
+/**
+ * fetch, sending a GET or HEAD that got no response again after each of
+ * NETWORK_RETRY_DELAYS_MS: a dropped connection or a network change fails a
+ * read that would succeed a moment later, and a read changes nothing on the
+ * server, so sending it again is safe. fetch rejects with a TypeError only
+ * when no response came; a response of any status, an abort, or a request
+ * of another method is the caller's at once.
+ */
+function fetchRetryingReads(input, init, attempt = 0) {
+    const method = (init.method ?? 'GET').toUpperCase();
+    const read = method === 'GET' || method === 'HEAD';
+    const sent = fetch(input, init);
+    if (!read)
+        return sent;
+    return sent.catch(async (error) => {
+        const delay = NETWORK_RETRY_DELAYS_MS[attempt];
+        if (delay === undefined || !(error instanceof TypeError) || init.signal?.aborted)
+            throw error;
+        await wait(delay, init.signal);
+        return fetchRetryingReads(input, init, attempt + 1);
+    });
+}
+/** Resolves after ms, or rejects with the abort when signal aborts first. */
+function wait(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, ms);
+        signal?.addEventListener('abort', () => {
+            clearTimeout(timer);
+            reject(signal.reason);
+        }, { once: true });
+    });
+}
 /**
  * Low-level HTTP client for inference.sh API
  *
@@ -127,7 +161,7 @@ export class HttpClient {
      * (`refused: 'return'`), handed back with its body unread.
      */
     async fetchHandled(url, targetUrl, init, refused) {
-        const send = (token) => fetch(url, {
+        const send = (token) => fetchRetryingReads(url, {
             ...init,
             headers: { ...init.headers, ...this.requestHeaders(targetUrl, token) },
             credentials: this.credentials,
@@ -213,7 +247,7 @@ export class HttpClient {
         if (options.data) {
             fetchOptions.body = JSON.stringify(options.data);
         }
-        const response = await fetch(fetchUrl, fetchOptions);
+        const response = await fetchRetryingReads(fetchUrl, fetchOptions);
         const responseText = await response.text();
         let data = null;
         try {

package/dist/index.d.ts

@@ -36,8 +36,8 @@ export type { ClientTool, ClientToolHandler, ClientToolResult } from './tool-bui
 export { lifecycleHook, learningHooks } from './hook-builder.js';
 export type { LifecycleHookBuilder } from './hook-builder.js';
 export { DeltaAccumulator, createLLMDeltaAccumulator, type DeltaEvent, type FieldTags, type FieldTagsRegistry } from './delta.js';
-export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, } from './utils.js';
-export type { PendingApproval } from './utils.js';
+export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, heldTurn, } from './utils.js';
+export type { PendingApproval, HeldTurn } from './utils.js';
 export * from './types.js';
 export type { TaskDTO as Task } from './types.js';
 import { HttpClient, type HttpClientConfig } from './http/client.js';

package/dist/index.js

@@ -38,7 +38,7 @@ export { lifecycleHook, learningHooks } from './hook-builder.js';
 // Delta accumulator for streaming responses
 export { DeltaAccumulator, createLLMDeltaAccumulator } from './delta.js';
 // Status utilities (handle both int and string status values)
-export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, } from './utils.js';
+export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, heldTurn, } from './utils.js';
 // Types - includes TaskStatus constants and all DTOs
 export * from './types.js';
 // =============================================================================

package/dist/types.d.ts

@@ -1489,6 +1489,34 @@ export interface CredentialRequirement {
      * Auth is the credential's auth provider, for a slug no row defines yet.
      */
     auth?: AuthMethod;
+    /**
+     * The rest describe the platform api_key scheme a platform app's deploy
+     * catalogues for the slug: set on the scheme it creates, and filled into
+     * an existing one only where that is still empty (an admin's edit
+     * stands). Any other deploy ignores them.
+     * DisplayName is the scheme's name ("Claude Code"); at most
+     * MaxCredentialDisplayName characters.
+     */
+    display_name?: string;
+    /**
+     * ConnectionScope is who a connection belongs to: team (empty) or user.
+     */
+    connection_scope?: CredentialScope;
+    /**
+     * Instructions tell a person how to get the key (markdown, at most
+     * MaxAuthProviderInstructions characters).
+     */
+    instructions?: string;
+    /**
+     * DocsURL is the scheme's documentation link.
+     */
+    docs_url?: string;
+    /**
+     * ExpiresAfterDays is how long a saved key lasts: it counts as expired
+     * this many days after it is saved. 0 is never; at most
+     * MaxExpiresAfterDays.
+     */
+    expires_after_days?: number;
 }
 /**
  * CompanySeed is a provider (the company behind a credential) as an app
@@ -1629,7 +1657,7 @@ export interface AppVersionDTO extends BaseModelDTO {
 export interface DeployWarning {
     /**
      * Code identifies the check: readonly_broad_credential,
-     * unused_credential, missing_annotations.
+     * unused_credential, missing_annotations, unapproved_platform_scope.
      */
     code: string;
     /**
@@ -1791,6 +1819,32 @@ export interface ArtifactVersionDTO extends BaseModelDTO {
         [key: string]: any;
     };
     created_by_user_id?: string;
+    /**
+     * Files are the pages and data served beside the index page.
+     */
+    files?: ArtifactVersionFileDTO[];
+}
+/**
+ * ArtifactVersionFileDTO is one file published beside a version's index.
+ */
+export interface ArtifactVersionFileDTO {
+    path: string;
+    size_bytes: number;
+    content_type: string;
+}
+/**
+ * ArtifactFileInput is one extra file in a publish, served at Path relative
+ * to the index page: another page (.html, .md), or css, js, json, svg, txt,
+ * xml, csv.
+ */
+export interface ArtifactFileInput {
+    path: string;
+    content: string;
+    /**
+     * ContentEncoding is "base64" when Content is base64-encoded, as for the
+     * main content.
+     */
+    content_encoding?: string;
 }
 /**
  * ArtifactCreateRequest is the body for POST /artifacts. Creates the entry
@@ -1816,6 +1870,11 @@ export interface ArtifactCreateRequest {
      * from browsers and CLIs: edge firewalls reject raw <script> in JSON bodies.
      */
     content_encoding?: string;
+    /**
+     * Files are published beside the index page. A publish is the whole
+     * site: files of the previous version are not carried over.
+     */
+    files?: ArtifactFileInput[];
     label?: string;
     notes?: string;
     origin?: string;
@@ -1862,6 +1921,11 @@ export interface ArtifactPublishRequest {
      * ContentEncoding is "base64" when Content is base64-encoded UTF-8.
      */
     content_encoding?: string;
+    /**
+     * Files are published beside the index page. A publish is the whole
+     * site: files of the previous version are not carried over.
+     */
+    files?: ArtifactFileInput[];
     label?: string;
     notes?: string;
     origin?: string;
@@ -1932,9 +1996,25 @@ export interface ArtifactDataRequest {
         [key: string]: any;
     };
     /**
-     * Limit caps a list; the server clamps it.
+     * Limit caps a list; the server clamps it to 200.
      */
     limit?: number;
+    /**
+     * Cursor continues a list from the next_cursor of the page before.
+     */
+    cursor?: string;
+    /**
+     * Order is the list order: -updated_at (the default), updated_at,
+     * -created_at or created_at.
+     */
+    order?: string;
+    /**
+     * Where keeps only documents whose top-level fields equal these values
+     * (string, number, boolean, or null for a missing field).
+     */
+    where?: {
+        [key: string]: any;
+    };
 }
 /**
  * ArtifactDataListResponse is a page of documents from one collection.
@@ -1943,6 +2023,10 @@ export interface ArtifactDataListResponse {
     collection: string;
     documents: ArtifactDataDTO[];
     count: number;
+    /**
+     * NextCursor fetches the page after this one; empty on the last page.
+     */
+    next_cursor?: string;
 }
 /**
  * ArtifactViewerDTO is what the user capability tells a page about whoever
@@ -2277,6 +2361,10 @@ export interface ChatMessageDTO extends BaseModelDTO, PermissionModelDTO {
     tools?: Tool[];
     tool_call_id?: string;
     tool_invocations?: ToolInvocationDTO[];
+    /**
+     * CompactionMeta is what a compaction (role compaction) retired.
+     */
+    compaction_meta?: CompactionMeta;
 }
 /**
  * PolicyRuleDTO is one rule, typed form Kind[selector](specifier).
@@ -2529,6 +2617,12 @@ export interface CredentialDTO extends BaseModelDTO, PermissionModelDTO {
     account_identifier?: string;
     account_name?: string;
     scopes: StringSlice;
+    /**
+     * AllowedScopes, on an OAuth app row (grant credentials), is every
+     * scope a login through it may request; absent when any scope may be
+     * (a team's own client by default). Never set on a login.
+     */
+    allowed_scopes?: StringSlice;
     expires_at?: string;
     vault_id?: string;
     metadata?: {
@@ -2572,17 +2666,12 @@ export interface CredentialConfigDTO {
     slug: string;
     /**
      * Provider is the credential slug (what Credential.Provider stores):
-     * one way to authenticate. The company it belongs to is ProviderInfo.
+     * one way to authenticate. The company it belongs to is Company.
      */
     provider: string;
     /**
-     * ProviderInfo is the company this slug belongs to, for grouping: the
-     * providers row its auth provider names, else the slug's own identity.
-     */
-    provider_info?: CompanySummary;
-    /**
-     * Company is ProviderInfo under its settled name (INF-1079); provider_info
-     * stays one release.
+     * Company is the company this slug belongs to, for grouping: the
+     * companies row its auth provider names, else the slug's own identity.
      */
     company?: CompanySummary;
     type: string;
@@ -2591,9 +2680,20 @@ export interface CredentialConfigDTO {
     description: string;
     icon_url?: string;
     how_it_works?: string[];
+    /**
+     * Instructions tell a person how to get what this credential asks for
+     * (markdown, links allowed): the auth scheme's.
+     */
+    instructions?: string;
     docs_url?: string;
     secret_fields?: SecretFieldConfig[];
     allows_byok: boolean;
+    /**
+     * ExpiresAfterDays is how long a saved key lasts, in days: a key counts
+     * as expired that long after it is saved (its credential's expires_at).
+     * 0 is never.
+     */
+    expires_after_days?: number;
     available: boolean;
     has_managed: boolean;
     /**
@@ -2613,7 +2713,7 @@ export interface CredentialConfigDTO {
      * AuthProviderID is set when the provider is one the team defined
      * itself (models.AuthProvider), so the UI can offer edit and remove.
      */
-    auth_scheme_id?: string;
+    auth_provider_id?: string;
     /**
      * Credential is the login used where no account is named: the caller's
      * own, else the workspace's default account.
@@ -2641,6 +2741,10 @@ export interface SecretFieldConfig {
     placeholder: string;
     sensitive: boolean;
     optional: boolean;
+    /**
+     * Pattern is the scheme field's pattern (shared.SecretField.Pattern).
+     */
+    pattern?: string;
 }
 /**
  * SearchRequest represents a search request.
@@ -2750,9 +2854,38 @@ export interface EngineDTO extends BaseModelDTO, PermissionModelDTO {
     api_url: string;
     status: EngineStatus;
     engine_version: string;
+    /**
+     * EnginePin is the version the engine is held on; empty follows stable.
+     */
+    engine_pin?: string;
+    /**
+     * Capabilities are what the engine last reported it can do.
+     */
+    capabilities?: EngineCapabilities;
     system_info?: SystemInfo;
     workers: (WorkerDTO | undefined)[];
 }
+/**
+ * EngineUpdateRequest names the release an engine should install: "stable",
+ * "canary", or a version such as v1.9.3. Empty is stable.
+ */
+export interface EngineUpdateRequest {
+    version?: string;
+}
+/**
+ * EngineRelease is one published engine build.
+ */
+export interface EngineRelease {
+    version: string;
+    release_date?: string;
+}
+/**
+ * EngineReleasesResponse is the head of each engine release channel.
+ */
+export interface EngineReleasesResponse {
+    stable?: EngineRelease;
+    canary?: EngineRelease;
+}
 /**
  * EngineSummary is a lightweight engine response embedded in tasks.
  */
@@ -2831,6 +2964,19 @@ export interface WorkerRAM {
     worker_id: string;
     total: number;
 }
+/**
+ * EngineCapability is something an engine can do beyond the base contract
+ * every engine meets. An engine reports the ones it has (EngineTelemetry);
+ * a task lists the ones it needs (Task.Requires); the scheduler only sends
+ * a task to an engine that has every one it needs.
+ */
+export type EngineCapability = "egress_gateway";
+export declare const EngineCapabilityEgressGateway: EngineCapability;
+/**
+ * EngineCapabilities is a set of capabilities, kept as a list. Nil and
+ * empty are the same: nothing beyond the base contract.
+ */
+export type EngineCapabilities = EngineCapability[];
 /**
  * EntitlementDTO for API responses
  */
@@ -2914,7 +3060,7 @@ export interface DecideEntitlementRequestRequest {
  * and APIError.Code on the legacy envelope. Clients branch on these, so a
  * code is a named const here, where it generates into models and the SDKs.
  */
-export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "team_role_required" | "blocked_by_usage_policy" | "last_owner" | "account_deactivated" | "account_banned" | "person_required" | "otp_required" | "requires_sign_in" | "insufficient_scope" | "invalid_scope" | "impersonation_reason_required" | "mcp_auth_expired" | "admin_session_required" | "admin_scopes_not_approved" | "cli_session_required" | "admin_required" | "same_admin_required" | "browser_session_required" | "invalid_ttl" | "admin_authenticator_required" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "form_closed" | "already_submitted" | "already_claimed" | "already_entitled" | "request_open" | "invalid_code" | "already_processed" | "expired" | "code_confirmation_required" | "app_retired" | "app_maintenance" | "invalid_transition" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_ENDED" | "WORKER_LEASED" | "APP_MISMATCH" | "VERSION_MISMATCH" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
+export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "requirements_not_met" | "team_role_required" | "blocked_by_usage_policy" | "last_owner" | "account_deactivated" | "account_banned" | "person_required" | "otp_required" | "requires_sign_in" | "insufficient_scope" | "invalid_scope" | "impersonation_reason_required" | "mcp_auth_expired" | "admin_session_required" | "admin_scopes_not_approved" | "cli_session_required" | "admin_required" | "same_admin_required" | "browser_session_required" | "invalid_ttl" | "admin_authenticator_required" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "form_closed" | "already_submitted" | "already_claimed" | "already_entitled" | "request_open" | "invalid_code" | "already_processed" | "expired" | "code_confirmation_required" | "app_retired" | "app_maintenance" | "invalid_transition" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_ENDED" | "WORKER_LEASED" | "APP_MISMATCH" | "VERSION_MISMATCH" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
 export declare const ErrorCodeInvalidRequest: ErrorCode;
 export declare const ErrorCodeValidationError: ErrorCode;
 export declare const ErrorCodeUnauthorized: ErrorCode;
@@ -2927,6 +3073,12 @@ export declare const ErrorCodeNotConfigured: ErrorCode;
 export declare const ErrorCodeMethodNotAllowed: ErrorCode;
 export declare const ErrorCodeRateLimited: ErrorCode;
 export declare const ErrorCodeInternalError: ErrorCode;
+/**
+ * ErrorCodeRequirementsNotMet (412): the run needs a secret or a
+ * credential the caller has not set up. Meta "errors" lists each
+ * RequirementError, its action saying how to set it up.
+ */
+export declare const ErrorCodeRequirementsNotMet: ErrorCode;
 /**
  * ErrorCodeTeamRoleRequired: the caller's team role or org-admin status
  * does not allow the action. Meta is TeamRoleRequiredMeta when a
@@ -4620,6 +4772,11 @@ export interface SetupAction {
      * list comes from; sent back when the keys are saved.
      */
     provider_website?: string;
+    /**
+     * Instructions tell a person how to get what the provider's scheme
+     * asks for (markdown, links allowed).
+     */
+    instructions?: string;
 }
 /**
  * CheckRequirementsRequest is the request body for checking requirements
@@ -5656,6 +5813,12 @@ export interface SecretField {
     placeholder?: string;
     sensitive?: boolean;
     optional?: boolean;
+    /**
+     * Pattern, when set, is a regular expression (RE2) a saved value must
+     * match, so a pasted login link or the wrong key is refused on save
+     * instead of failing the first run ("^sk-ant-oat01-").
+     */
+    pattern?: string;
 }
 /**
  * AuthMethodClientAuth is how client_id/client_secret reach the token
@@ -6547,6 +6710,12 @@ export declare const GraphEdgeTypeReferences: GraphEdgeType;
 export declare const GraphEdgeTypeSupersedes: GraphEdgeType;
 export declare const GraphEdgeTypeInput: GraphEdgeType;
 export declare const GraphEdgeTypeOutput: GraphEdgeType;
+/**
+ * InterruptResourceTurn is an interrupt that holds a run's next turn before
+ * its model call, with nothing in flight; its ResourceID is the run's. An
+ * allow starts the turn, a deny ends the run.
+ */
+export declare const InterruptResourceTurn: InterruptResourceType;
 /**
  * MergeStrategy defines how a delta field should be merged by consumers.
  */
@@ -7353,6 +7522,12 @@ export declare const TaskStatusUploading: TaskStatus;
 export declare const TaskStatusCompleted: TaskStatus;
 export declare const TaskStatusFailed: TaskStatus;
 export declare const TaskStatusCancelled: TaskStatus;
+/**
+ * TaskStatusRejected is a run admission refused (no balance, no payment
+ * method). The task is written already ended, keeping what was asked
+ * for; it never ran and no status leads to it.
+ */
+export declare const TaskStatusRejected: TaskStatus;
 /**
  * Infra defines where a task should run.
  */
@@ -7698,7 +7873,7 @@ export declare const InterruptResolutionDeny: InterruptResolution;
 /**
  * InterruptResourceType identifies the kind of resource an interrupt gates.
  */
-export type InterruptResourceType = "tool_invocation" | "hook_event";
+export type InterruptResourceType = "turn" | "tool_invocation" | "hook_event";
 export declare const InterruptResourceToolInvocation: InterruptResourceType;
 export declare const InterruptResourceHookEvent: InterruptResourceType;
 /**
@@ -7835,6 +8010,16 @@ export interface ContextInjection {
      */
     items?: string[];
 }
+/**
+ * CompactionMeta is stored on ChatMessage for context compaction markers.
+ */
+export interface CompactionMeta {
+    compacted_up_to_order: number;
+    compacted_count: number;
+    estimated_tokens: number;
+    method?: string;
+    analysis?: string;
+}
 /**
  * ToolCallEventData is the typed payload for agent.tool_call events.
  */

package/dist/types.js

@@ -376,6 +376,7 @@ export const ToolRiskMedium = "medium";
  * ToolRiskHigh: dangerous or irreversible changes.
  */
 export const ToolRiskHigh = "high";
+export const EngineCapabilityEgressGateway = "egress_gateway";
 export const ErrorCodeInvalidRequest = "invalid_request";
 export const ErrorCodeValidationError = "validation_error";
 export const ErrorCodeUnauthorized = "unauthorized";
@@ -388,6 +389,12 @@ export const ErrorCodeNotConfigured = "not_configured";
 export const ErrorCodeMethodNotAllowed = "method_not_allowed";
 export const ErrorCodeRateLimited = "rate_limited";
 export const ErrorCodeInternalError = "internal_error";
+/**
+ * ErrorCodeRequirementsNotMet (412): the run needs a secret or a
+ * credential the caller has not set up. Meta "errors" lists each
+ * RequirementError, its action saying how to set it up.
+ */
+export const ErrorCodeRequirementsNotMet = "requirements_not_met";
 /**
  * ErrorCodeTeamRoleRequired: the caller's team role or org-admin status
  * does not allow the action. Meta is TeamRoleRequiredMeta when a
@@ -979,6 +986,12 @@ export const GraphEdgeTypeReferences = "references";
 export const GraphEdgeTypeSupersedes = "supersedes";
 export const GraphEdgeTypeInput = "input";
 export const GraphEdgeTypeOutput = "output";
+/**
+ * InterruptResourceTurn is an interrupt that holds a run's next turn before
+ * its model call, with nothing in flight; its ResourceID is the run's. An
+ * allow starts the turn, a deny ends the run.
+ */
+export const InterruptResourceTurn = "turn";
 export const MergeStrategyConcat = "concat";
 export const MergeStrategyReplace = "replace";
 export const MergeStrategyIndexed = "indexed";
@@ -1454,6 +1467,12 @@ export const TaskStatusUploading = 9;
 export const TaskStatusCompleted = 10;
 export const TaskStatusFailed = 11;
 export const TaskStatusCancelled = 12;
+/**
+ * TaskStatusRejected is a run admission refused (no balance, no payment
+ * method). The task is written already ended, keeping what was asked
+ * for; it never ran and no status leads to it.
+ */
+export const TaskStatusRejected = 13;
 export const InfraPrivate = "private";
 export const InfraCloud = "cloud";
 export const InfraPrivateFirst = "private_first";

package/dist/utils.d.ts

@@ -2,6 +2,7 @@
  * Status utilities for handling both int and string-based status values.
  * Provides future compatibility when API migrates from int to string status.
  */
+import type { InterruptDTO } from './types.js';
 import { TaskStatus } from './types.js';
 import type { AgentRunState, ChatDTO, ChatMessageStatus } from './types.js';
 /**
@@ -10,7 +11,7 @@ import type { AgentRunState, ChatDTO, ChatMessageStatus } from './types.js';
  */
 export declare function parseStatus(status: number | string | undefined | null): TaskStatus;
 /**
- * Check if a task status is terminal (completed, failed, or cancelled).
+ * Check if a task status is terminal (completed, failed, cancelled, or rejected).
  * Handles both int and string status values.
  */
 export declare function isTerminalStatus(status: number | string | undefined | null): boolean;
@@ -39,3 +40,12 @@ export type PendingApproval = {
  * which the API projects onto the chat, so no message scan is needed.
  */
 export declare function pendingApprovals(chat: ChatDTO | null | undefined): PendingApproval[];
+/** A run's next turn held for the person (InterruptResourceTurn): after a long stretch without them, it waits for "keep going" (allow) or "stop" (deny). */
+export type HeldTurn = {
+    interruptId: string;
+    runId: string;
+    /** Steps the run took without the person, when the api says. */
+    steps: number | null;
+};
+/** The held turn among a run's pending interrupts, if one is held. */
+export declare function heldTurn(interrupts: InterruptDTO[] | null | undefined): HeldTurn | null;

package/dist/utils.js

@@ -2,8 +2,8 @@
  * Status utilities for handling both int and string-based status values.
  * Provides future compatibility when API migrates from int to string status.
  */
-import { InterruptReasonToolApproval, InterruptStatusPending } from './types.js';
-import { TaskStatusUnknown, TaskStatusReceived, TaskStatusQueued, TaskStatusDispatched, TaskStatusPreparing, TaskStatusServing, TaskStatusSettingUp, TaskStatusRunning, TaskStatusCancelling, TaskStatusUploading, TaskStatusCompleted, TaskStatusFailed, TaskStatusCancelled, AgentRunStateWorking, AgentRunStateSubmitted, AgentRunStateInputRequired, AgentRunStateAuthRequired, AgentRunStateCompleted, AgentRunStateFailed, AgentRunStateCanceled, AgentRunStateRejected, ChatMessageStatusReady, ChatMessageStatusFailed, ChatMessageStatusCancelled, ChatStatusBusy, ChatStatusAwaitingInput, } from './types.js';
+import { InterruptReasonToolApproval, InterruptResourceTurn, InterruptStatusPending } from './types.js';
+import { TaskStatusUnknown, TaskStatusReceived, TaskStatusQueued, TaskStatusDispatched, TaskStatusPreparing, TaskStatusServing, TaskStatusSettingUp, TaskStatusRunning, TaskStatusCancelling, TaskStatusUploading, TaskStatusCompleted, TaskStatusFailed, TaskStatusCancelled, TaskStatusRejected, AgentRunStateWorking, AgentRunStateSubmitted, AgentRunStateInputRequired, AgentRunStateAuthRequired, AgentRunStateCompleted, AgentRunStateFailed, AgentRunStateCanceled, AgentRunStateRejected, ChatMessageStatusReady, ChatMessageStatusFailed, ChatMessageStatusCancelled, ChatStatusBusy, ChatStatusAwaitingInput, } from './types.js';
 /** Map string status names to TaskStatus values (for future string-based API) */
 const STATUS_STRING_MAP = {
     unknown: TaskStatusUnknown,
@@ -19,6 +19,7 @@ const STATUS_STRING_MAP = {
     completed: TaskStatusCompleted,
     failed: TaskStatusFailed,
     cancelled: TaskStatusCancelled,
+    rejected: TaskStatusRejected,
 };
 /**
  * Parse task status from int or string to TaskStatus number.
@@ -37,12 +38,12 @@ export function parseStatus(status) {
     return TaskStatusUnknown;
 }
 /**
- * Check if a task status is terminal (completed, failed, or cancelled).
+ * Check if a task status is terminal (completed, failed, cancelled, or rejected).
  * Handles both int and string status values.
  */
 export function isTerminalStatus(status) {
     const parsed = parseStatus(status);
-    return parsed === TaskStatusCompleted || parsed === TaskStatusFailed || parsed === TaskStatusCancelled;
+    return parsed === TaskStatusCompleted || parsed === TaskStatusFailed || parsed === TaskStatusCancelled || parsed === TaskStatusRejected;
 }
 // Run and message state predicates. Ports of the Go methods AgentRunState.IsTerminal/
 // IsInterrupted/IsSettled and ChatMessageStatus.IsTerminal; every consumer uses these.
@@ -79,7 +80,8 @@ export function isAwaitingHuman(chat) {
         return isRunInterrupted(run.state);
     return chat?.status === ChatStatusAwaitingInput;
 }
-function parseApprovalMeta(interrupt) {
+/** An interrupt's meta, which arrives as an object or a JSON string. */
+function parseMeta(interrupt) {
     const meta = interrupt.meta;
     if (!meta)
         return {};
@@ -104,7 +106,7 @@ export function pendingApprovals(chat) {
         if (interrupt.reason !== InterruptReasonToolApproval || interrupt.status !== InterruptStatusPending) {
             continue;
         }
-        const meta = parseApprovalMeta(interrupt);
+        const meta = parseMeta(interrupt);
         out.push({
             interruptId: interrupt.id,
             toolInvocationId: interrupt.resource_id ?? meta.tool_invocation_id ?? '',
@@ -115,3 +117,11 @@ export function pendingApprovals(chat) {
     }
     return out;
 }
+/** The held turn among a run's pending interrupts, if one is held. */
+export function heldTurn(interrupts) {
+    const interrupt = interrupts?.find(i => i.resource_type === InterruptResourceTurn && i.status === InterruptStatusPending);
+    if (!interrupt)
+        return null;
+    const { steps } = parseMeta(interrupt);
+    return { interruptId: interrupt.id, runId: interrupt.run_id, steps: typeof steps === 'number' ? steps : null };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inferencesh/sdk",
-  "version": "0.28.0",
+  "version": "0.29.1",
   "description": "Official JavaScript/TypeScript SDK for inference.sh - Run AI models with a simple API",
   "type": "module",
   "main": "dist/index.js",