@inferencesh/sdk 0.31.0 → 0.33.0

package/CHANGELOG.md

@@ -7,6 +7,32 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.33.0] - 2026-10-24
+
+### Breaking
+- `AuthResponse.otp_method` is gone: read `otp_methods`, the ordered `SecondFactor[]` (`totp`, `passkey`, `recovery`, `email`) a sign-in may be finished with.
+
+### Added
+- The agent reducer applies streamed reasoning as it arrives; before, only text streamed.
+- `AgentInfo.model_capabilities`: what the agent's model takes besides text (`image`, `file`, ...), from its core app version.
+- `isRunWaiting(run)`. A chat whose run waits on the agent's own wait call (`ChatStatusWaiting`) counts as an open turn, not as one needing a person.
+- Generated types: `ChatStatusWaiting`, `ToolInvocationStatusWaiting`, `ChatEventTypeRunFailed`, `ChatEventTypeRunEnded`, `ChatRunEvent`, `RunEndReason`, `SecondFactor`, `InfraRemote`, `ScopeContentWrite`, `ErrorCodeLastAuthenticator`, `InstancePriceHistoryPointDTO`, app capability and remote llm direct mode types.
+
+### Changed
+- Proxy endpoints: cancelling a queued message needs `conversations:write` only.
+
+## [0.32.0] - 2026-10-20
+
+### Changed
+- `approveTool` and `rejectTool` resolve the call's interrupt (`POST /interrupts/{id}/resolve`), the same answer as every other pause (a wait, a hook gate, a held turn); they no longer post to `/tools/{id}/invoke|reject`. A call that is not awaiting approval rejects with "Tool call … is not awaiting approval".
+- `resolveInterrupt` (agent actions and `AgentsAPI`) takes an optional `reason`, sent with a deny as `data.reason`.
+
+## [0.31.0] - 2026-10-19
+
+### Added
+- `pendingWait(interrupts)` and `PendingWait`: the wait a run is paused on by its agent's wait tool (`InterruptReasonWait`), with when it ends and the agent's note.
+- Generated types: `InternalToolsConfig.wait`, `AgentTool.approval_timeout` (seconds a call waits for approval before it is refused), `InterruptReasonWait`.
+
 ## [0.30.0] - 2026-10-18
 
 ### Removed

package/dist/agent/actions.js

@@ -5,7 +5,7 @@
  * These are created once per provider instance with access to dispatch.
  */
 import { ToolInvocationStatusAwaitingInput, ToolInvocationStatusInProgress, ToolTypeClient, } from '../types.js';
-import { isChatBusy, isMessageTerminal, isRunInterrupted, isRunWorking } from '../utils.js';
+import { approvalInterrupt, isChatBusy, isMessageTerminal, isRunInterrupted, isRunWorking } from '../utils.js';
 import { StreamableManager } from '../http/streamable.js';
 import { PollManager } from '../http/poll.js';
 import { createLLMDeltaAccumulator } from '../delta.js';
@@ -29,6 +29,23 @@ function isTransient(err) {
 export function createActions(ctx) {
     const dispatchedToolInvocations = new Set();
     const { client, dispatch, getState, getConfig, getChatId, getClientToolHandlers, getStreamManager, setStreamManager, getStreamEnabled, getPollIntervalMs, callbacks } = ctx;
+    /**
+     * The interrupt a call awaiting approval waits on: approving or rejecting
+     * the call resolves it, like every other pause. The chat's pending
+     * interrupts carry it; when they have not caught up with the call yet, the
+     * run's are read from the api.
+     */
+    const approvalInterruptId = async (toolInvocationId) => {
+        const chat = getState().chat;
+        let interrupt = approvalInterrupt(chat?.pending_interrupts, toolInvocationId);
+        const runId = chat?.active_run?.id;
+        if (!interrupt && runId) {
+            interrupt = approvalInterrupt(await api.listRunInterrupts(client, runId), toolInvocationId);
+        }
+        if (!interrupt)
+            throw new Error(`Tool call ${toolInvocationId} is not awaiting approval`);
+        return interrupt.id;
+    };
     let prevChatWasBusy = false;
     // Bumped by every streamChat() and stopStream(). A stream whose generation
     // is no longer current (stopped, reset, switched to another chat) leaves
@@ -375,13 +392,14 @@ export function createActions(ctx) {
                 const result = await api.sendMessage(client, agentConfig, chatId, trimmedText, files);
                 if (result) {
                     const { chatId: newChatId, userMessage } = result;
-                    // Add user message from POST response immediately
-                    if (userMessage)
+                    // An open SSE stream owns the message: it may already have moved it
+                    // on (a message that ends a wait is taken up before this response
+                    // returns). Polling refetches only when the chat's status changes,
+                    // so it shows the response, as does a chat with no stream yet.
+                    const manager = getStreamManager();
+                    if (userMessage && !(manager instanceof StreamableManager))
                         dispatch({ type: 'UPDATE_MESSAGE', payload: userMessage });
-                    // Start streaming if not already connected
-                    const streamManager = getStreamManager();
-                    if (newChatId && !streamManager) {
-                        // Either new chat or stream was stopped - restart streaming
+                    if (newChatId && !manager) {
                         if (!chatId) {
                             dispatch({ type: 'SET_CHAT_ID', payload: newChatId });
                             callbacks.onChatCreated?.(newChatId);
@@ -453,7 +471,7 @@ export function createActions(ctx) {
         },
         approveTool: async (toolInvocationId) => {
             try {
-                await api.approveTool(client, toolInvocationId);
+                await api.resolveInterrupt(client, await approvalInterruptId(toolInvocationId), 'allow');
             }
             catch (error) {
                 console.error('[AgentSDK] Failed to approve tool:', error);
@@ -466,7 +484,7 @@ export function createActions(ctx) {
         },
         rejectTool: async (toolInvocationId, reason) => {
             try {
-                await api.rejectTool(client, toolInvocationId, reason);
+                await api.resolveInterrupt(client, await approvalInterruptId(toolInvocationId), 'deny', reason);
             }
             catch (error) {
                 console.error('[AgentSDK] Failed to reject tool:', error);

package/dist/agent/api.d.ts

@@ -46,24 +46,6 @@ export declare function submitToolResult(client: AgentClient, toolInvocationId:
     };
     form_data?: Record<string, unknown>;
 }, attachments?: FileRef[]): Promise<void>;
-/**
- * Approve a call awaiting approval; the api then runs it.
- *
- * Needs approvals:write, which only the account holder's own sign-in holds
- * (the web app, or a `belt login` session). An API key, an app's OAuth token
- * or the server proxy is refused with 403 `requires_sign_in`
- * (ErrorCodeRequiresSignIn); the error's message says what to do.
- */
-export declare function approveTool(client: AgentClient, toolInvocationId: string): Promise<void>;
-/**
- * Reject a call awaiting approval, with an optional reason the agent sees.
- *
- * Needs approvals:write, which only the account holder's own sign-in holds
- * (the web app, or a `belt login` session). An API key, an app's OAuth token
- * or the server proxy is refused with 403 `requires_sign_in`
- * (ErrorCodeRequiresSignIn); the error's message says what to do.
- */
-export declare function rejectTool(client: AgentClient, toolInvocationId: string, reason?: string): Promise<void>;
 /**
  * What "always allow" can save for a call awaiting approval, narrowest first.
  * The api computes the options from the call; each one, saved, answers it again.
@@ -94,14 +76,16 @@ export declare function explainTool(client: AgentClient, chatId: string, toolInv
  */
 export declare function updateChatSettings(client: AgentClient, chatId: string, settings: ChatSettingsRequest): Promise<ChatSettingsDTO>;
 /**
- * Allow or deny an interrupt gate on an agent run.
+ * Allow or deny an interrupt on an agent run: a tool call waiting for
+ * approval, a wait, a hook gate or a held turn, all the same way. `reason`,
+ * with deny, goes back to the agent with the refused call.
  *
  * Needs approvals:write, which only the account holder's own sign-in holds
  * (the web app, or a `belt login` session). An API key, an app's OAuth token
  * or the server proxy is refused with 403 `requires_sign_in`
  * (ErrorCodeRequiresSignIn); the error's message says what to do.
  */
-export declare function resolveInterrupt(client: AgentClient, interruptId: string, decision: 'allow' | 'deny'): Promise<InterruptDTO>;
+export declare function resolveInterrupt(client: AgentClient, interruptId: string, decision: 'allow' | 'deny', reason?: string): Promise<InterruptDTO>;
 export declare function listRunInterrupts(client: AgentClient, runId: string): Promise<InterruptDTO[]>;
 export declare function uploadFile(client: AgentClient, file: globalThis.File): Promise<FileRef>;
 export declare function chatStreamRequest(client: AgentClient, chatId: string): StreamRequest;

package/dist/agent/api.js

@@ -76,9 +76,11 @@ export async function fetchAgentInfo(client, agentRef) {
     try {
         const resp = await client.http.request('get', `/agents/${agentRef}`);
         const version = resp.data?.version;
+        const capabilities = version?.core_app?.app?.version?.metadata?.capabilities;
         return {
             description: version?.description,
             example_prompts: version?.example_prompts,
+            model_capabilities: Array.isArray(capabilities) ? capabilities : undefined,
         };
     }
     catch {
@@ -151,28 +153,6 @@ export async function submitToolResult(client, toolInvocationId, resultOrAction,
     }
     await client.http.request('post', `/tools/${toolInvocationId}`, { data });
 }
-/**
- * Approve a call awaiting approval; the api then runs it.
- *
- * Needs approvals:write, which only the account holder's own sign-in holds
- * (the web app, or a `belt login` session). An API key, an app's OAuth token
- * or the server proxy is refused with 403 `requires_sign_in`
- * (ErrorCodeRequiresSignIn); the error's message says what to do.
- */
-export async function approveTool(client, toolInvocationId) {
-    await client.http.request('post', `/tools/${toolInvocationId}/invoke`);
-}
-/**
- * Reject a call awaiting approval, with an optional reason the agent sees.
- *
- * Needs approvals:write, which only the account holder's own sign-in holds
- * (the web app, or a `belt login` session). An API key, an app's OAuth token
- * or the server proxy is refused with 403 `requires_sign_in`
- * (ErrorCodeRequiresSignIn); the error's message says what to do.
- */
-export async function rejectTool(client, toolInvocationId, reason) {
-    await client.http.request('post', `/tools/${toolInvocationId}/reject`, { data: { reason } });
-}
 /**
  * What "always allow" can save for a call awaiting approval, narrowest first.
  * The api computes the options from the call; each one, saved, answers it again.
@@ -219,16 +199,18 @@ export async function updateChatSettings(client, chatId, settings) {
 // Interrupt operations
 // =========================================================================
 /**
- * Allow or deny an interrupt gate on an agent run.
+ * Allow or deny an interrupt on an agent run: a tool call waiting for
+ * approval, a wait, a hook gate or a held turn, all the same way. `reason`,
+ * with deny, goes back to the agent with the refused call.
  *
  * Needs approvals:write, which only the account holder's own sign-in holds
  * (the web app, or a `belt login` session). An API key, an app's OAuth token
  * or the server proxy is refused with 403 `requires_sign_in`
  * (ErrorCodeRequiresSignIn); the error's message says what to do.
  */
-export async function resolveInterrupt(client, interruptId, decision) {
+export async function resolveInterrupt(client, interruptId, decision, reason) {
     const resp = await client.http.request('post', `/interrupts/${interruptId}/resolve`, {
-        data: { decision }
+        data: reason ? { decision, data: { reason } } : { decision }
     });
     return resp.data;
 }

package/dist/agent/reducer.js

@@ -3,13 +3,15 @@
  *
  * Pure reducer for managing agent chat state.
  */
-import { ChatStatusBusy, ChatStatusAwaitingInput, ChatStatusIdle } from '../types.js';
-import { isMessageTerminal, isRunInterrupted, isRunWorking } from '../utils.js';
+import { ChatMessageContentTypeReasoning, ChatMessageContentTypeText, ChatStatusBusy, ChatStatusAwaitingInput, ChatStatusIdle, ChatStatusWaiting, } from '../types.js';
+import { isMessageTerminal, isRunInterrupted, isRunWaiting, isRunWorking } from '../utils.js';
 function deriveChatStatus(run) {
     if (!run)
         return ChatStatusIdle;
     if (isRunWorking(run.state))
         return ChatStatusBusy;
+    if (isRunWaiting(run))
+        return ChatStatusWaiting;
     if (isRunInterrupted(run.state))
         return ChatStatusAwaitingInput;
     return ChatStatusIdle;
@@ -60,26 +62,55 @@ function normalizeMessage(message, existing) {
     return { ...message, content: existing?.content ?? [] };
 }
 /**
- * Streamed text only grows until the message is done. Deltas build the text
- * locally, while a message update carries the server's saved copy, which can
- * lag behind them (often still empty). Taking that copy as-is blanks the text
- * until the next delta, so while the message is still generating, a text
- * that is an earlier version of what is shown keeps what is shown. Once the
- * message is terminal the server's copy is final and wins.
+ * The content blocks deltas stream, and the delta field each is built from.
+ * An optional block gets no block until something streams into it.
  */
-function keepStreamedText(updated, existing) {
+const streamedBlocks = [
+    { type: ChatMessageContentTypeText, field: 'response', optional: false },
+    { type: ChatMessageContentTypeReasoning, field: 'reasoning', optional: true },
+];
+/** content with the block of type set to text, added in front when missing. */
+function withBlockText(content, type, text) {
+    return content.some((c) => c.type === type)
+        ? content.map((c) => (c.type === type ? { ...c, text } : c))
+        : [{ type, text }, ...content];
+}
+const blockText = (message, type) => message.content.find((c) => c.type === type)?.text;
+/** copy is an earlier version of shown: shown already has all of it and more. */
+const isBehind = (copy, shown) => !!shown && shown.startsWith(copy ?? '');
+/**
+ * Streamed text and reasoning only grow until the message is done. Deltas
+ * build them locally, while a message update carries the server's saved
+ * copy, which can lag behind them (often still empty). While the message is
+ * generating, a server copy behind what is shown keeps what is shown. Once
+ * the message is terminal the server's copy is final and wins.
+ */
+function keepStreamedBlocks(updated, existing) {
     if (isMessageTerminal(updated.status))
         return updated;
-    const shown = existing.content.find((c) => c.type === 'text')?.text;
-    if (!shown)
-        return updated;
-    const incoming = updated.content.find((c) => c.type === 'text');
-    if (incoming?.text && !shown.startsWith(incoming.text))
-        return updated;
-    const content = incoming
-        ? updated.content.map((c) => (c === incoming ? { ...c, text: shown } : c))
-        : [{ type: 'text', text: shown }, ...updated.content];
-    return { ...updated, content };
+    let content = updated.content;
+    for (const { type } of streamedBlocks) {
+        const shown = blockText(existing, type);
+        if (isBehind(blockText(updated, type), shown))
+            content = withBlockText(content, type, shown);
+    }
+    return content === updated.content ? updated : { ...updated, content };
+}
+/**
+ * The message with what the deltas have built so far. Deltas from a stream
+ * joined mid-message start partway, behind what the message already shows,
+ * so the message keeps its copy until they catch up.
+ */
+function applyStreamedOutput(message, output) {
+    let content = message.content;
+    for (const { type, field, optional } of streamedBlocks) {
+        const streamed = output[field];
+        if (optional && !streamed)
+            continue;
+        if (!isBehind(streamed, blockText(message, type)))
+            content = withBlockText(content, type, streamed);
+    }
+    return content === message.content ? message : { ...message, content };
 }
 const normalizeMessages = (messages) => messages.map((m) => normalizeMessage(m));
 // =============================================================================
@@ -182,7 +213,7 @@ export function chatReducer(state, action) {
             const existingIndex = state.messages.findIndex((m) => m.id === message.id);
             if (existingIndex !== -1) {
                 const existing = state.messages[existingIndex];
-                const updated = keepStreamedText(action.partial ? normalizeMessage({ ...existing, ...message }, existing) : normalizeMessage(message), existing);
+                const updated = keepStreamedBlocks(action.partial ? normalizeMessage({ ...existing, ...message }, existing) : normalizeMessage(message), existing);
                 if (existing === updated)
                     return state;
                 const newMessages = [...state.messages];
@@ -207,16 +238,10 @@ export function chatReducer(state, action) {
             const target = msgs.find(m => m.id === messageId);
             if (!target)
                 return state;
-            const textBlock = target.content.find(c => c.type === 'text');
-            // Deltas from a stream joined mid-message start partway; the message
-            // update already showed more, so keep it until they catch up.
-            if (textBlock?.text && textBlock.text.startsWith(output.response ?? ''))
+            const next = applyStreamedOutput(target, output);
+            if (next === target)
                 return state;
-            const newContent = textBlock
-                ? target.content.map(c => c.type === 'text' ? { ...c, text: output.response } : c)
-                : [{ type: 'text', text: output.response }, ...target.content];
-            const newMessages = msgs.map(m => m.id === target.id ? { ...target, content: newContent } : m);
-            return { ...state, messages: newMessages };
+            return { ...state, messages: msgs.map(m => (m.id === target.id ? next : m)) };
         }
         case 'SET_CONNECTION_STATUS':
             return { ...state, connectionStatus: action.payload };

package/dist/agent/types.d.ts

@@ -89,7 +89,13 @@ export declare function isTemplateConfig(config: AgentOptions): config is Templa
 /**
  * Agent metadata fetched from the backend for template configs
  */
-export type AgentInfo = Partial<Pick<AgentVersionDTO, 'description' | 'example_prompts'>>;
+export type AgentInfo = Partial<Pick<AgentVersionDTO, 'description' | 'example_prompts'>> & {
+    /**
+     * What the agent's model takes besides text ("image", "file", ...), from
+     * its app version. Undefined when unknown; then assume everything.
+     */
+    model_capabilities?: string[];
+};
 /**
  * Status of the chat
  */
@@ -134,7 +140,8 @@ export interface AgentChatActions {
     /** Answer an MCP tool call's input requests (AwaitingInput status with MCPInputState data) */
     submitMCPInput: (toolInvocationId: string, responses: Record<string, ElicitResult>) => Promise<void>;
     /**
-     * Approve a tool (for HIL approval - AwaitingApproval status)
+     * Approve a tool (for HIL approval - AwaitingApproval status). Resolves the
+     * call's interrupt with allow, as resolveInterrupt does for every pause.
      *
      * Needs the account holder's own sign-in (approvals:write): with an API
      * key, an app's token or the server proxy it rejects with 403
@@ -142,7 +149,8 @@ export interface AgentChatActions {
      */
     approveTool: (toolInvocationId: string) => Promise<void>;
     /**
-     * Reject a tool (for HIL approval - AwaitingApproval status)
+     * Reject a tool (for HIL approval - AwaitingApproval status). Resolves the
+     * call's interrupt with deny; `reason` goes back to the agent.
      *
      * Needs the account holder's own sign-in (approvals:write): with an API
      * key, an app's token or the server proxy it rejects with 403

package/dist/api/agents.d.ts

@@ -219,13 +219,15 @@ export declare class AgentsAPI {
         form_data?: Record<string, unknown>;
     }, attachments?: FileRef[]): Promise<void>;
     /**
-     * Resolve an interrupt gate on an agent run.
+     * Resolve an interrupt on an agent run: a tool call waiting for approval, a
+     * wait, a hook gate or a held turn, all the same way. `reason`, with deny,
+     * goes back to the agent with the refused call.
      *
      * Needs approvals:write, which only the account holder's own sign-in holds:
      * with an API key, an app's OAuth token or the server proxy it rejects with
      * 403 `requires_sign_in` (ErrorCodeRequiresSignIn).
      */
-    resolveInterrupt(interruptId: string, decision: 'allow' | 'deny'): Promise<Response<InterruptDTO>>;
+    resolveInterrupt(interruptId: string, decision: 'allow' | 'deny', reason?: string): Promise<Response<InterruptDTO>>;
     /**
      * List pending interrupts for an agent run
      */

package/dist/api/agents.js

@@ -522,15 +522,17 @@ export class AgentsAPI {
         await this.http.request('post', `/tools/${toolInvocationId}`, { data });
     }
     /**
-     * Resolve an interrupt gate on an agent run.
+     * Resolve an interrupt on an agent run: a tool call waiting for approval, a
+     * wait, a hook gate or a held turn, all the same way. `reason`, with deny,
+     * goes back to the agent with the refused call.
      *
      * Needs approvals:write, which only the account holder's own sign-in holds:
      * with an API key, an app's OAuth token or the server proxy it rejects with
      * 403 `requires_sign_in` (ErrorCodeRequiresSignIn).
      */
-    async resolveInterrupt(interruptId, decision) {
+    async resolveInterrupt(interruptId, decision, reason) {
         return this.http.request('post', `/interrupts/${interruptId}/resolve`, {
-            data: { decision }
+            data: reason ? { decision, data: { reason } } : { decision }
         });
     }
     /**

package/dist/index.d.ts

@@ -36,7 +36,7 @@ export type { ClientTool, ClientToolHandler, ClientToolResult } from './tool-bui
 export { lifecycleHook, learningHooks } from './hook-builder.js';
 export type { LifecycleHookBuilder } from './hook-builder.js';
 export { DeltaAccumulator, createLLMDeltaAccumulator, type DeltaEvent, type FieldTags, type FieldTagsRegistry } from './delta.js';
-export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, heldTurn, pendingWait, } from './utils.js';
+export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunWaiting, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, heldTurn, pendingWait, } from './utils.js';
 export type { PendingApproval, HeldTurn, PendingWait } from './utils.js';
 export * from './types.js';
 export type { TaskDTO as Task } from './types.js';

package/dist/index.js

@@ -38,7 +38,7 @@ export { lifecycleHook, learningHooks } from './hook-builder.js';
 // Delta accumulator for streaming responses
 export { DeltaAccumulator, createLLMDeltaAccumulator } from './delta.js';
 // Status utilities (handle both int and string status values)
-export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, heldTurn, pendingWait, } from './utils.js';
+export { parseStatus, isTerminalStatus, isChatBusy, isAwaitingHuman, isRunTerminal, isRunInterrupted, isRunWaiting, isRunSettled, isRunWorking, isMessageTerminal, pendingApprovals, heldTurn, pendingWait, } from './utils.js';
 // Types - includes TaskStatus constants and all DTOs
 export * from './types.js';
 // =============================================================================

package/dist/proxy/endpoints.json

@@ -140,7 +140,6 @@
             "path": "/chats/messages/{messageId}/cancel",
             "purpose": "cancel a message",
             "scopes": [
-                "conversations:read",
                 "conversations:write"
             ]
         },

package/dist/types.d.ts

@@ -608,7 +608,11 @@ export interface AuthResponse {
     session_id: string;
     is_new?: boolean;
     otp_required?: boolean;
-    otp_method?: string;
+    /**
+     * OTPMethods are the second factors the sign-in may be finished with,
+     * the default first (POST /auth/otp/verify with method).
+     */
+    otp_methods?: SecondFactor[];
     challenge_token?: string;
     redirect_to?: string;
     provider?: string;
@@ -911,7 +915,7 @@ export interface EstimateCostResponse {
 /**
  * Scope represents an API key permission scope string.
  */
-export type Scope = "*" | "agents" | "apps" | "conversations" | "files" | "datastores" | "templates" | "flows" | "projects" | "teams" | "billing" | "artifacts" | "agents:read" | "agents:write" | "agents:execute" | "apps:read" | "apps:write" | "apps:execute" | "conversations:read" | "conversations:write" | "files:read" | "files:write" | "datastores:read" | "datastores:write" | "flows:read" | "flows:write" | "flows:execute" | "projects:read" | "projects:write" | "teams:read" | "teams:write" | "billing:read" | "billing:write" | "secrets:read" | "secrets:write" | "secrets:reveal" | "credentials:read" | "credentials:write" | "engines:read" | "engines:write" | "remotes:read" | "remotes:write" | "apikeys:read" | "apikeys:write" | "knowledge:read" | "knowledge:write" | "artifacts:read" | "artifacts:write" | "user:read" | "user:write" | "settings:read" | "settings:write" | "approvals:write" | "admin:read" | "admin:write" | "store:pricing" | "store:submit";
+export type Scope = "*" | "agents" | "apps" | "conversations" | "files" | "datastores" | "templates" | "flows" | "projects" | "teams" | "billing" | "artifacts" | "agents:read" | "agents:write" | "agents:execute" | "apps:read" | "apps:write" | "apps:execute" | "conversations:read" | "conversations:write" | "files:read" | "files:write" | "datastores:read" | "datastores:write" | "flows:read" | "flows:write" | "flows:execute" | "projects:read" | "projects:write" | "teams:read" | "teams:write" | "billing:read" | "billing:write" | "secrets:read" | "secrets:write" | "secrets:reveal" | "credentials:read" | "credentials:write" | "engines:read" | "engines:write" | "remotes:read" | "remotes:write" | "apikeys:read" | "apikeys:write" | "knowledge:read" | "knowledge:write" | "artifacts:read" | "artifacts:write" | "user:read" | "user:write" | "settings:read" | "settings:write" | "approvals:write" | "admin:read" | "admin:write" | "store:pricing" | "store:submit" | "content:write";
 /**
  * API Key Scopes - hierarchical permission system.
  * Resource-level scopes (e.g., "agents") imply all action-level scopes (e.g., "agents:read").
@@ -1218,10 +1222,18 @@ export declare const ScopeStorePricing: Scope;
  * publisher's behalf. Held like ScopeStorePricing.
  */
 export declare const ScopeStoreSubmit: Scope;
+/**
+ * ScopeContentWrite writes the site's content (/content): blog and docs
+ * pages, menus and the platform media library. Held like
+ * ScopeStorePricing: only in the platform's workspace, by its members,
+ * their keys and runs, and its own keys. Reads of published content take
+ * no scope.
+ */
+export declare const ScopeContentWrite: Scope;
 /**
  * ScopeGroup identifies a category of scopes for UI grouping
  */
-export type ScopeGroup = "agents" | "apps" | "conversations" | "files" | "datastores" | "flows" | "projects" | "teams" | "billing" | "secrets" | "credentials" | "engines" | "remotes" | "apikeys" | "knowledge" | "artifacts" | "user" | "settings" | "approvals" | "admin" | "store";
+export type ScopeGroup = "agents" | "apps" | "conversations" | "files" | "datastores" | "flows" | "projects" | "teams" | "billing" | "secrets" | "credentials" | "engines" | "remotes" | "apikeys" | "knowledge" | "artifacts" | "user" | "settings" | "approvals" | "admin" | "store" | "content";
 export declare const ScopeGroupAgents: ScopeGroup;
 export declare const ScopeGroupApps: ScopeGroup;
 export declare const ScopeGroupConversations: ScopeGroup;
@@ -1243,6 +1255,7 @@ export declare const ScopeGroupSettings: ScopeGroup;
 export declare const ScopeGroupApprovals: ScopeGroup;
 export declare const ScopeGroupAdmin: ScopeGroup;
 export declare const ScopeGroupStore: ScopeGroup;
+export declare const ScopeGroupContent: ScopeGroup;
 /**
  * ScopeDefinition describes a single scope for UI rendering
  */
@@ -1398,9 +1411,6 @@ export interface AppPricing {
     description: string;
     description_rendered?: string;
 }
-/**
- * AppFunction represents a callable entry point within an app version.
- */
 export interface AppFunction {
     name: string;
     description?: string;
@@ -3062,7 +3072,7 @@ export interface DecideEntitlementRequestRequest {
  * and APIError.Code on the legacy envelope. Clients branch on these, so a
  * code is a named const here, where it generates into models and the SDKs.
  */
-export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "requirements_not_met" | "team_role_required" | "blocked_by_usage_policy" | "last_owner" | "account_deactivated" | "account_banned" | "person_required" | "otp_required" | "requires_sign_in" | "insufficient_scope" | "invalid_scope" | "impersonation_reason_required" | "mcp_auth_expired" | "admin_session_required" | "admin_scopes_not_approved" | "cli_session_required" | "admin_required" | "same_admin_required" | "browser_session_required" | "invalid_ttl" | "admin_authenticator_required" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "form_closed" | "already_submitted" | "already_claimed" | "already_entitled" | "request_open" | "invalid_code" | "already_processed" | "expired" | "code_confirmation_required" | "app_retired" | "app_maintenance" | "invalid_transition" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_ENDED" | "WORKER_LEASED" | "APP_MISMATCH" | "VERSION_MISMATCH" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
+export type ErrorCode = "invalid_request" | "validation_error" | "unauthorized" | "forbidden" | "not_found" | "conflict" | "name_conflict" | "already_exists" | "not_configured" | "method_not_allowed" | "rate_limited" | "internal_error" | "requirements_not_met" | "team_role_required" | "blocked_by_usage_policy" | "last_owner" | "account_deactivated" | "account_banned" | "person_required" | "otp_required" | "requires_sign_in" | "insufficient_scope" | "invalid_scope" | "impersonation_reason_required" | "mcp_auth_expired" | "admin_session_required" | "admin_scopes_not_approved" | "cli_session_required" | "admin_required" | "same_admin_required" | "browser_session_required" | "invalid_ttl" | "admin_authenticator_required" | "last_authenticator" | "limit_exceeded" | "feature_not_available" | "entitlement_unavailable" | "payment_required" | "payment_method_required" | "form_closed" | "already_submitted" | "already_claimed" | "already_entitled" | "request_open" | "invalid_code" | "already_processed" | "expired" | "code_confirmation_required" | "app_retired" | "app_maintenance" | "invalid_transition" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_ENDED" | "WORKER_LEASED" | "APP_MISMATCH" | "VERSION_MISMATCH" | "agents_disabled" | "remote_offline" | "remote_timeout" | "harness_not_drivable" | "harness_too_old";
 export declare const ErrorCodeInvalidRequest: ErrorCode;
 export declare const ErrorCodeValidationError: ErrorCode;
 export declare const ErrorCodeUnauthorized: ErrorCode;
@@ -3171,6 +3181,13 @@ export declare const ErrorCodeInvalidTTL: ErrorCode;
  * has not proved it gets otp_required instead: re-authenticate with it.
  */
 export declare const ErrorCodeAdminAuthenticatorRequired: ErrorCode;
+/**
+ * ErrorCodeLastAuthenticator (409): the change would leave two-step
+ * verification on with no method to prove it (removing the last
+ * authenticator app or passkey), or turn it on with none enrolled.
+ * Turn two-step verification off first, or enroll a method.
+ */
+export declare const ErrorCodeLastAuthenticator: ErrorCode;
 /**
  * Entitlements. LimitExceeded (402) and FeatureNotAvailable (403) carry
  * EntitlementErrorMeta. EntitlementUnavailable (500) means the plan could
@@ -3846,6 +3863,29 @@ export interface InstanceTypeBootTime {
     updated_at: string;
     sample_size: number;
 }
+/**
+ * InstancePriceHistoryPointDTO is one day's cheapest hourly prices, in cents,
+ * for a GPU type. List prices rarely move; the in-stock price does, as stock
+ * comes and goes. A price with no listing (or no stock) that day is omitted.
+ */
+export interface InstancePriceHistoryPointDTO {
+    day: string;
+    /**
+     * OnDemand and Spot are the cheapest listed prices, in stock or not.
+     */
+    on_demand?: number;
+    spot?: number;
+    /**
+     * OnDemandInStock and SpotInStock are the cheapest prices that had stock.
+     */
+    on_demand_in_stock?: number;
+    spot_in_stock?: number;
+    providers: number;
+    /**
+     * Regions is the number of provider regions with on-demand stock.
+     */
+    regions: number;
+}
 export interface InterruptDTO extends BaseModelDTO, PermissionModelDTO {
     run_id: string;
     chat_id: string;
@@ -5087,7 +5127,13 @@ export interface TaskLog {
 }
 /**
  * TaskDTO is the full API response for a task.
+ * TaskEgress is what a task's sandbox sent to and received from the
+ * internet through the engine's egress gateway, in bytes.
  */
+export interface TaskEgress {
+    bytes_out: number;
+    bytes_in: number;
+}
 export interface TaskDTO extends BaseModelDTO, PermissionModelDTO {
     graph_id?: string;
     user_public_key: string;
@@ -5121,6 +5167,12 @@ export interface TaskDTO extends BaseModelDTO, PermissionModelDTO {
     events: TaskEvent[];
     logs: TaskLog[];
     usage_events: (UsageEventDTO | undefined)[];
+    /**
+     * Egress is what the task's sandbox moved through the engine's egress
+     * gateway, reported by the engine when the task ended. Absent for a
+     * task that ran without the gateway.
+     */
+    egress?: TaskEgress;
     session_id?: string;
     session_timeout?: number;
 }
@@ -5442,7 +5494,17 @@ export interface UserDTO extends BaseModelDTO {
     avatar_url: string;
     banned_at?: string;
     ban_note?: string;
+    /**
+     * TOTPEnabled mirrors TwoFactorEnabled for clients built before it
+     * (the Swift SDK decodes it as required).
+     * Deprecated: read TwoFactorEnabled. Kept until no Swift app build older
+     * than sdk-swift 0.23.0 is in use, since those fail to decode /me without it.
+     */
     totp_enabled: boolean;
+    /**
+     * TwoFactorEnabled is the account's two-step verification switch.
+     */
+    two_factor_enabled: boolean;
     metadata?: UserMetadataDTO;
 }
 /**
@@ -6236,10 +6298,15 @@ export declare const EntitlementRequestOpen: EntitlementRequestState;
 export declare const EntitlementRequestAccepted: EntitlementRequestState;
 export declare const EntitlementRequestDeclined: EntitlementRequestState;
 export declare const EntitlementRequestWithdrawn: EntitlementRequestState;
-export type ChatStatus = "busy" | "idle" | "awaiting_input" | "completed";
+export type ChatStatus = "busy" | "idle" | "awaiting_input" | "waiting" | "completed";
 export declare const ChatStatusBusy: ChatStatus;
 export declare const ChatStatusIdle: ChatStatus;
 export declare const ChatStatusAwaitingInput: ChatStatus;
+/**
+ * ChatStatusWaiting: the run is paused on the agent's own wait call. A
+ * message ends the wait early; nobody has to act on it.
+ */
+export declare const ChatStatusWaiting: ChatStatus;
 export declare const ChatStatusCompleted: ChatStatus;
 export type PlanStepStatus = "pending" | "in_progress" | "completed" | "cancelled";
 export declare const PlanStepStatusPending: PlanStepStatus;
@@ -6321,8 +6388,41 @@ export interface ChatMessageContent {
     tool_calls?: ToolCall[];
     event?: ChatEvent;
 }
-export type ChatEventType = "hook";
+export type ChatEventType = "hook" | "run_failed" | "run_ended";
 export declare const ChatEventTypeHook: ChatEventType;
+/**
+ * ChatEventTypeRunFailed marks the point a run ended in failure; the
+ * content's text is the run's error.
+ */
+export declare const ChatEventTypeRunFailed: ChatEventType;
+/**
+ * ChatEventTypeRunEnded marks the point a run completed or was stopped;
+ * the event's run says how, and the content's text, when set, why.
+ */
+export declare const ChatEventTypeRunEnded: ChatEventType;
+/**
+ * RunEndReason is why a run that completed ended the way it did, when its
+ * last turn did not end with a reply.
+ */
+export type RunEndReason = "output_limit" | "no_reply";
+/**
+ * RunEndReasonOutputLimit: the model's last turn hit its output limit
+ * (max_tokens) before it replied or called a tool.
+ */
+export declare const RunEndReasonOutputLimit: RunEndReason;
+/**
+ * RunEndReasonNoReply: the model ended its last turn with no reply and
+ * no tool call.
+ */
+export declare const RunEndReasonNoReply: RunEndReason;
+/**
+ * ChatRunEvent is how a run ended, on a run_ended event.
+ */
+export interface ChatRunEvent {
+    run_id: string;
+    state: AgentRunState;
+    reason?: RunEndReason;
+}
 /**
  * ChatEvent is the payload of an event-role message: system info shown in the
  * chat but never sent to the model.
@@ -6330,6 +6430,7 @@ export declare const ChatEventTypeHook: ChatEventType;
 export interface ChatEvent {
     type: ChatEventType;
     hook?: ChatHookEvent;
+    run?: ChatRunEvent;
 }
 /**
  * ChatHookEvent records one lifecycle hook handler run.
@@ -6720,8 +6821,8 @@ export declare const GraphEdgeTypeOutput: GraphEdgeType;
 export declare const InterruptResourceTurn: InterruptResourceType;
 /**
  * InterruptReasonWait is a tool call the agent made to wait: the run is
- * paused until the interrupt's deadline, when its own expiry trigger settles
- * it (allow), or until a person ends the wait sooner. Its resource is the
+ * paused until the interrupt's deadline, when the expiry sweep settles it
+ * (allow), or until a person ends the wait sooner. Its resource is the
  * wait call (InterruptResourceToolInvocation).
  */
 export declare const InterruptReasonWait: InterruptReason;
@@ -7046,6 +7147,33 @@ export type MCPServerAuthType = "oauth" | "api_key" | "none";
 export declare const MCPServerAuthOAuth: MCPServerAuthType;
 export declare const MCPServerAuthAPIKey: MCPServerAuthType;
 export declare const MCPServerAuthNone: MCPServerAuthType;
+/**
+ * SecondFactor is one way a person proves their second factor. It names
+ * what a session proved (AuthSession.SecondFactor), what a login challenge
+ * offers, the method a verify request picks, and the kind of an enrolled
+ * method (SecondFactorMethod.Kind: the enrollable ones).
+ */
+export type SecondFactor = "totp" | "passkey" | "recovery" | "email";
+/**
+ * SecondFactorTOTP: a code from an enrolled authenticator app.
+ */
+export declare const SecondFactorTOTP: SecondFactor;
+/**
+ * SecondFactorPasskey: a WebAuthn assertion from an enrolled passkey.
+ */
+export declare const SecondFactorPasskey: SecondFactor;
+/**
+ * SecondFactorRecovery: one of the account's single-use recovery codes.
+ * Not enrolled on its own: issued once an authenticator exists.
+ */
+export declare const SecondFactorRecovery: SecondFactor;
+/**
+ * SecondFactorEmail: a code emailed to the account. The weakest: the
+ * same mailbox a magic link lands in, so it is offered only to an
+ * account with two-step verification off (a platform admin's first
+ * sign-in, re-auth before they enroll).
+ */
+export declare const SecondFactorEmail: SecondFactor;
 /**
  * TeamInviteStatus represents the status of a team invitation
  */
@@ -7540,10 +7668,17 @@ export declare const TaskStatusRejected: TaskStatus;
 /**
  * Infra defines where a task should run.
  */
-export type Infra = "private" | "cloud" | "private_first";
+export type Infra = "private" | "cloud" | "private_first" | "remote";
 export declare const InfraPrivate: Infra;
 export declare const InfraCloud: Infra;
 export declare const InfraPrivateFirst: Infra;
+/**
+ * InfraRemote is a model call a harness on the caller's own remote
+ * answers (an agent whose model app is a harness model app). The
+ * scheduler never takes it: the remote model service sends it to the
+ * remote's daemon, whose frames end it.
+ */
+export declare const InfraRemote: Infra;
 /**
  * TaskLogType defines the type of task log.
  */
@@ -8058,11 +8193,12 @@ export declare const AgentEventSubagentCompleted: AgentEventType;
 /**
  * ToolInvocationStatus represents the execution status of a tool invocation
  */
-export type ToolInvocationStatus = "pending" | "in_progress" | "awaiting_input" | "awaiting_approval" | "completed" | "failed" | "cancelled";
+export type ToolInvocationStatus = "pending" | "in_progress" | "awaiting_input" | "awaiting_approval" | "waiting" | "completed" | "failed" | "cancelled";
 export declare const ToolInvocationStatusPending: ToolInvocationStatus;
 export declare const ToolInvocationStatusInProgress: ToolInvocationStatus;
 export declare const ToolInvocationStatusAwaitingInput: ToolInvocationStatus;
 export declare const ToolInvocationStatusAwaitingApproval: ToolInvocationStatus;
+export declare const ToolInvocationStatusWaiting: ToolInvocationStatus;
 export declare const ToolInvocationStatusCompleted: ToolInvocationStatus;
 export declare const ToolInvocationStatusFailed: ToolInvocationStatus;
 export declare const ToolInvocationStatusCancelled: ToolInvocationStatus;

package/dist/types.js

@@ -321,6 +321,14 @@ export const ScopeStorePricing = "store:pricing";
  * publisher's behalf. Held like ScopeStorePricing.
  */
 export const ScopeStoreSubmit = "store:submit";
+/**
+ * ScopeContentWrite writes the site's content (/content): blog and docs
+ * pages, menus and the platform media library. Held like
+ * ScopeStorePricing: only in the platform's workspace, by its members,
+ * their keys and runs, and its own keys. Reads of published content take
+ * no scope.
+ */
+export const ScopeContentWrite = "content:write";
 export const ScopeGroupAgents = "agents";
 export const ScopeGroupApps = "apps";
 export const ScopeGroupConversations = "conversations";
@@ -342,6 +350,7 @@ export const ScopeGroupSettings = "settings";
 export const ScopeGroupApprovals = "approvals";
 export const ScopeGroupAdmin = "admin";
 export const ScopeGroupStore = "store";
+export const ScopeGroupContent = "content";
 /**
  * AlwaysAllowScopeExact: this call exactly (each piece of the command,
  * the file, the domain).
@@ -485,6 +494,13 @@ export const ErrorCodeInvalidTTL = "invalid_ttl";
  * has not proved it gets otp_required instead: re-authenticate with it.
  */
 export const ErrorCodeAdminAuthenticatorRequired = "admin_authenticator_required";
+/**
+ * ErrorCodeLastAuthenticator (409): the change would leave two-step
+ * verification on with no method to prove it (removing the last
+ * authenticator app or passkey), or turn it on with none enrolled.
+ * Turn two-step verification off first, or enroll a method.
+ */
+export const ErrorCodeLastAuthenticator = "last_authenticator";
 /**
  * Entitlements. LimitExceeded (402) and FeatureNotAvailable (403) carry
  * EntitlementErrorMeta. EntitlementUnavailable (500) means the plan could
@@ -870,6 +886,11 @@ export const EntitlementRequestWithdrawn = "withdrawn";
 export const ChatStatusBusy = "busy";
 export const ChatStatusIdle = "idle";
 export const ChatStatusAwaitingInput = "awaiting_input";
+/**
+ * ChatStatusWaiting: the run is paused on the agent's own wait call. A
+ * message ends the wait early; nobody has to act on it.
+ */
+export const ChatStatusWaiting = "waiting";
 export const ChatStatusCompleted = "completed";
 export const PlanStepStatusPending = "pending";
 export const PlanStepStatusInProgress = "in_progress";
@@ -907,6 +928,26 @@ export const ChannelTypeDiscord = "discord";
 export const ChannelTypeTeams = "teams";
 export const ChannelTypeTelegram = "telegram";
 export const ChatEventTypeHook = "hook";
+/**
+ * ChatEventTypeRunFailed marks the point a run ended in failure; the
+ * content's text is the run's error.
+ */
+export const ChatEventTypeRunFailed = "run_failed";
+/**
+ * ChatEventTypeRunEnded marks the point a run completed or was stopped;
+ * the event's run says how, and the content's text, when set, why.
+ */
+export const ChatEventTypeRunEnded = "run_ended";
+/**
+ * RunEndReasonOutputLimit: the model's last turn hit its output limit
+ * (max_tokens) before it replied or called a tool.
+ */
+export const RunEndReasonOutputLimit = "output_limit";
+/**
+ * RunEndReasonNoReply: the model ended its last turn with no reply and
+ * no tool call.
+ */
+export const RunEndReasonNoReply = "no_reply";
 /**
  * DescriptionLimitListing bounds the description of an app, agent, flow,
  * MCP server or knowledge entry. A description is shown in listings and
@@ -994,8 +1035,8 @@ export const GraphEdgeTypeOutput = "output";
 export const InterruptResourceTurn = "turn";
 /**
  * InterruptReasonWait is a tool call the agent made to wait: the run is
- * paused until the interrupt's deadline, when its own expiry trigger settles
- * it (allow), or until a person ends the wait sooner. Its resource is the
+ * paused until the interrupt's deadline, when the expiry sweep settles it
+ * (allow), or until a person ends the wait sooner. Its resource is the
  * wait call (InterruptResourceToolInvocation).
  */
 export const InterruptReasonWait = "wait";
@@ -1111,6 +1152,26 @@ export const VideoRes4K = "4k";
 export const MCPServerAuthOAuth = "oauth";
 export const MCPServerAuthAPIKey = "api_key";
 export const MCPServerAuthNone = "none";
+/**
+ * SecondFactorTOTP: a code from an enrolled authenticator app.
+ */
+export const SecondFactorTOTP = "totp";
+/**
+ * SecondFactorPasskey: a WebAuthn assertion from an enrolled passkey.
+ */
+export const SecondFactorPasskey = "passkey";
+/**
+ * SecondFactorRecovery: one of the account's single-use recovery codes.
+ * Not enrolled on its own: issued once an authenticator exists.
+ */
+export const SecondFactorRecovery = "recovery";
+/**
+ * SecondFactorEmail: a code emailed to the account. The weakest: the
+ * same mailbox a magic link lands in, so it is offered only to an
+ * account with two-step verification off (a platform admin's first
+ * sign-in, re-auth before they enroll).
+ */
+export const SecondFactorEmail = "email";
 export const TeamInviteStatusPending = "pending";
 export const TeamInviteStatusAccepted = "accepted";
 export const TeamInviteStatusDeclined = "declined";
@@ -1483,6 +1544,13 @@ export const TaskStatusRejected = 13;
 export const InfraPrivate = "private";
 export const InfraCloud = "cloud";
 export const InfraPrivateFirst = "private_first";
+/**
+ * InfraRemote is a model call a harness on the caller's own remote
+ * answers (an agent whose model app is a harness model app). The
+ * scheduler never takes it: the remote model service sends it to the
+ * remote's daemon, whose frames end it.
+ */
+export const InfraRemote = "remote";
 export const TaskLogTypeBuild = 0;
 export const TaskLogTypeRun = 1;
 export const TaskLogTypeServe = 2;
@@ -1672,6 +1740,7 @@ export const ToolInvocationStatusPending = "pending";
 export const ToolInvocationStatusInProgress = "in_progress";
 export const ToolInvocationStatusAwaitingInput = "awaiting_input";
 export const ToolInvocationStatusAwaitingApproval = "awaiting_approval";
+export const ToolInvocationStatusWaiting = "waiting";
 export const ToolInvocationStatusCompleted = "completed";
 export const ToolInvocationStatusFailed = "failed";
 export const ToolInvocationStatusCancelled = "cancelled";

package/dist/utils.d.ts

@@ -4,7 +4,7 @@
  */
 import type { InterruptDTO } from './types.js';
 import { TaskStatus } from './types.js';
-import type { AgentRunState, ChatDTO, ChatMessageStatus } from './types.js';
+import type { AgentRunDTO, AgentRunState, ChatDTO, ChatMessageStatus } from './types.js';
 /**
  * Parse task status from int or string to TaskStatus number.
  * Handles both current int-based API and future string-based API.
@@ -18,12 +18,14 @@ export declare function isTerminalStatus(status: number | string | undefined | n
 export declare function isRunTerminal(state: AgentRunState | null | undefined): boolean;
 /** Parked on a human: a tool approval or input (input_required) or an authorization (auth_required). */
 export declare function isRunInterrupted(state: AgentRunState | null | undefined): boolean;
+/** Paused on the agent's own wait call: it resumes at its deadline or on a message, so nobody has to act. */
+export declare function isRunWaiting(run: Pick<AgentRunDTO, 'state' | 'interrupt_reason'> | null | undefined): boolean;
 /** The run produces no further events this turn: terminal or interrupted. */
 export declare function isRunSettled(state: AgentRunState | null | undefined): boolean;
 /** The run is executing: submitted or working. */
 export declare function isRunWorking(state: AgentRunState | null | undefined): boolean;
 export declare function isMessageTerminal(status: ChatMessageStatus | null | undefined): boolean;
-/** The turn is still open: the run is working or parked on a human (approval, input, authorization). */
+/** The turn is still open: the run is working, waiting, or parked on a human (approval, input, authorization). */
 export declare function isChatBusy(chat: ChatDTO | null | undefined): boolean;
 /** The chat is blocked on a human: nothing more arrives until someone approves, answers or authorizes. */
 export declare function isAwaitingHuman(chat: ChatDTO | null | undefined): boolean;
@@ -49,6 +51,8 @@ export type HeldTurn = {
 };
 /** The held turn among a run's pending interrupts, if one is held. */
 export declare function heldTurn(interrupts: InterruptDTO[] | null | undefined): HeldTurn | null;
+/** The interrupt a tool call awaiting approval waits on, among a chat's or a run's pending interrupts. */
+export declare function approvalInterrupt(interrupts: InterruptDTO[] | null | undefined, toolInvocationId: string): InterruptDTO | undefined;
 /** A run paused by its agent's wait tool (InterruptReasonWait): it continues at `until`, or sooner when the person ends the wait ("continue now", allow) or cancels it (deny). */
 export type PendingWait = {
     interruptId: string;

package/dist/utils.js

@@ -3,7 +3,7 @@
  * Provides future compatibility when API migrates from int to string status.
  */
 import { InterruptReasonToolApproval, InterruptReasonWait, InterruptResourceTurn, InterruptStatusPending } from './types.js';
-import { TaskStatusUnknown, TaskStatusReceived, TaskStatusQueued, TaskStatusDispatched, TaskStatusPreparing, TaskStatusServing, TaskStatusSettingUp, TaskStatusRunning, TaskStatusCancelling, TaskStatusUploading, TaskStatusCompleted, TaskStatusFailed, TaskStatusCancelled, TaskStatusRejected, AgentRunStateWorking, AgentRunStateSubmitted, AgentRunStateInputRequired, AgentRunStateAuthRequired, AgentRunStateCompleted, AgentRunStateFailed, AgentRunStateCanceled, AgentRunStateRejected, ChatMessageStatusReady, ChatMessageStatusFailed, ChatMessageStatusCancelled, ChatStatusBusy, ChatStatusAwaitingInput, } from './types.js';
+import { TaskStatusUnknown, TaskStatusReceived, TaskStatusQueued, TaskStatusDispatched, TaskStatusPreparing, TaskStatusServing, TaskStatusSettingUp, TaskStatusRunning, TaskStatusCancelling, TaskStatusUploading, TaskStatusCompleted, TaskStatusFailed, TaskStatusCancelled, TaskStatusRejected, AgentRunStateWorking, AgentRunStateSubmitted, AgentRunStateInputRequired, AgentRunStateAuthRequired, AgentRunStateCompleted, AgentRunStateFailed, AgentRunStateCanceled, AgentRunStateRejected, ChatMessageStatusReady, ChatMessageStatusFailed, ChatMessageStatusCancelled, ChatStatusBusy, ChatStatusAwaitingInput, ChatStatusWaiting, } from './types.js';
 /** Map string status names to TaskStatus values (for future string-based API) */
 const STATUS_STRING_MAP = {
     unknown: TaskStatusUnknown,
@@ -54,6 +54,10 @@ export function isRunTerminal(state) {
 export function isRunInterrupted(state) {
     return state === AgentRunStateInputRequired || state === AgentRunStateAuthRequired;
 }
+/** Paused on the agent's own wait call: it resumes at its deadline or on a message, so nobody has to act. */
+export function isRunWaiting(run) {
+    return !!run && isRunInterrupted(run.state) && run.interrupt_reason === InterruptReasonWait;
+}
 /** The run produces no further events this turn: terminal or interrupted. */
 export function isRunSettled(state) {
     return isRunTerminal(state) || isRunInterrupted(state);
@@ -65,19 +69,19 @@ export function isRunWorking(state) {
 export function isMessageTerminal(status) {
     return status === ChatMessageStatusReady || status === ChatMessageStatusFailed || status === ChatMessageStatusCancelled;
 }
-/** The turn is still open: the run is working or parked on a human (approval, input, authorization). */
+/** The turn is still open: the run is working, waiting, or parked on a human (approval, input, authorization). */
 export function isChatBusy(chat) {
     const run = chat?.active_run;
     if (run) {
         return isRunWorking(run.state) || isRunInterrupted(run.state);
     }
-    return chat?.status === ChatStatusBusy || chat?.status === ChatStatusAwaitingInput;
+    return chat?.status === ChatStatusBusy || chat?.status === ChatStatusAwaitingInput || chat?.status === ChatStatusWaiting;
 }
 /** The chat is blocked on a human: nothing more arrives until someone approves, answers or authorizes. */
 export function isAwaitingHuman(chat) {
     const run = chat?.active_run;
     if (run)
-        return isRunInterrupted(run.state);
+        return isRunInterrupted(run.state) && !isRunWaiting(run);
     return chat?.status === ChatStatusAwaitingInput;
 }
 /** An interrupt's meta, which arrives as an object or a JSON string. */
@@ -129,6 +133,10 @@ export function heldTurn(interrupts) {
     const { steps } = parseMeta(interrupt);
     return { interruptId: interrupt.id, runId: interrupt.run_id, steps: typeof steps === 'number' ? steps : null };
 }
+/** The interrupt a tool call awaiting approval waits on, among a chat's or a run's pending interrupts. */
+export function approvalInterrupt(interrupts, toolInvocationId) {
+    return pendingInterrupt(interrupts, i => i.reason === InterruptReasonToolApproval && (i.resource_id || parseMeta(i).tool_invocation_id) === toolInvocationId);
+}
 /** The wait among a run's pending interrupts, if the run is waiting. */
 export function pendingWait(interrupts) {
     const interrupt = pendingInterrupt(interrupts, i => i.reason === InterruptReasonWait);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inferencesh/sdk",
-  "version": "0.31.0",
+  "version": "0.33.0",
   "description": "Official JavaScript/TypeScript SDK for inference.sh - Run AI models with a simple API",
   "type": "module",
   "main": "dist/index.js",