@ingram-cloud/sdk 1.1.0 → 1.4.0

package/dist/client.js

@@ -143,6 +143,13 @@ export class IngramCloud {
                 body,
             }),
         },
+        /** End-user BYOK (#170): a smith's own provider keys, resolved ahead of the
+         *  tenant's so the end-user's provider account is billed. Never read back. */
+        modelKeys: {
+            list: (pid, opts) => this.data("GET", `/smiths/${enc(pid)}/model_keys`, opts),
+            put: (pid, provider, body, opts) => this.json("PUT", `/smiths/${enc(pid)}/model_keys/${enc(provider)}`, { ...opts, body }),
+            delete: (pid, provider, opts) => this.empty("DELETE", `/smiths/${enc(pid)}/model_keys/${enc(provider)}`, opts),
+        },
         schedules: {
             list: (pid, opts) => this.data("GET", `/smiths/${enc(pid)}/schedules`, opts),
             create: (pid, body, opts) => this.json("POST", `/smiths/${enc(pid)}/schedules`, {
@@ -246,6 +253,13 @@ export class IngramCloud {
                     rawBody: form,
                 });
             },
+            /** The template's HTML bundle — the same bytes the agent's MCP endpoint
+             *  serves, so a host can render a panel without vendoring a copy.
+             *  Tenant-authed: call it server-side and proxy to your chat UI. */
+            content: (aid, name, opts) => this.request("GET", `/agents/${enc(aid)}/ui/${enc(name)}/content`, {
+                ...opts,
+                headers: { accept: "text/html", ...opts?.headers },
+            }).then((r) => r.text()),
             delete: (aid, name, opts) => this.json("DELETE", `/agents/${enc(aid)}/ui/${enc(name)}`, opts),
         },
     };
@@ -314,6 +328,9 @@ export class IngramCloud {
     usage = {
         /** Token/cost/run totals grouped by app, smith, model, or customer. */
         breakdown: (query, opts) => this.json("GET", "/usage", { ...opts, query }),
+        /** The raw billable-usage event ledger (keyset-paginated, newest first) — the
+         *  per-event rows the breakdown aggregates. */
+        events: (query, opts) => this.page("/usage/events", query, opts),
     };
     // ── Files (the OpenAI Files API) ─────────────────────────────────────────
     files = {
@@ -381,7 +398,14 @@ export class IngramCloud {
                 body,
             }),
             delete: (wid, opts) => this.empty("DELETE", `/tenant/webhooks/${enc(wid)}`, opts),
+            /** Rotate the signing secret, returning the new one exactly once. Pass
+             *  `grace_seconds` to keep the old secret accepted during an overlap window. */
+            rotateSecret: (wid, body, opts) => this.json("POST", `/tenant/webhooks/${enc(wid)}/rotate_secret`, { ...opts, body: body ?? {} }),
             test: (wid, opts) => this.json("POST", `/tenant/webhooks/${enc(wid)}/test`, opts),
+            /** The persisted delivery attempts for a webhook (durable retry audit trail). */
+            deliveries: (wid, query, opts) => this.page(`/tenant/webhooks/${enc(wid)}/deliveries`, query, opts),
+            /** Force a fresh delivery attempt for one record (e.g. after the endpoint recovers). */
+            redeliver: (wid, did, opts) => this.json("POST", `/tenant/webhooks/${enc(wid)}/deliveries/${enc(did)}/redeliver`, opts),
         },
         providers: {
             list: (opts) => this.data("GET", "/tenant/providers", opts),
@@ -438,7 +462,19 @@ export class IngramCloud {
             delete: (opts) => this.empty("DELETE", "/tenant/email", opts),
         },
     };
-    // ── Organization (org token: projects + billing) ────────────────────────
+    // ── Delegated connector consent (connector OAuth, #123) ─────────────────
+    // Tenant-admin token. The tenant's hosted consent page (the provider's
+    // `authorize_url`) reads the pending request, then completes or declines it
+    // server-to-server; the returned `redirect_url` is where to 302 the browser.
+    oauth = {
+        authorizeRequests: {
+            get: (requestId, opts) => this.json("GET", `/oauth/authorize-requests/${enc(requestId)}`, opts),
+            complete: (requestId, body, opts) => this.json("POST", `/oauth/authorize-requests/${enc(requestId)}/complete`, { ...opts, body }),
+            decline: (requestId, opts) => this.json("POST", `/oauth/authorize-requests/${enc(requestId)}/decline`, opts),
+        },
+    };
+    // ── Organization (org token: projects + tokens) ─────────────────────────
+    // Note: the `/v1/organization/billing/*` surface is not yet wrapped here.
     organization = {
         projects: {
             list: (opts) => this.data("GET", "/organization/projects", opts),

package/dist/zod/agents.js

@@ -67,6 +67,8 @@ export const AgentDraft = z
     model: z.string().nullable(),
     enabled_hosted_tools: z.array(z.string()),
     vector_store_ids: z.array(z.string()),
+    /** Registered MCP servers this agent's smiths load, by name. Null = all. */
+    mcp_servers: z.array(z.string()).nullable(),
     auto_memory: z.boolean().nullable(),
     memory_consolidation: z.boolean().nullable(),
     variables: z.array(AgentVariable),
@@ -87,6 +89,8 @@ export const AgentOut = z
     rollout_version: z.number().int().nullable(),
     rollout_percent: z.number().int(),
     smith_count: z.number().int().optional(),
+    /** Newest run across every smith of this agent. Null until one runs. */
+    last_activity_at: z.string().nullable().optional(),
     created_at: z.string().nullable(),
     updated_at: z.string().nullable(),
 })
@@ -101,6 +105,7 @@ export const AgentVersionOut = z
         model: z.string().nullish(),
         enabled_hosted_tools: z.array(z.string()).optional(),
         vector_store_ids: z.array(z.string()).optional(),
+        mcp_servers: z.array(z.string()).nullish(),
         auto_memory: z.boolean().nullish(),
         memory_consolidation: z.boolean().nullish(),
         variables: z.array(AgentVariable).optional(),
@@ -123,6 +128,8 @@ export const AgentIn = z
     model: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope runs to these registered MCP servers (by name). Null/omitted = all. */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
     variables: z.array(AgentVariable).nullish(),
@@ -135,6 +142,9 @@ export const AgentPatch = z
     model: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope runs to these registered MCP servers (by name). An explicit null
+     *  clears the restriction (= all); omitted leaves it unchanged. */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
     variables: z.array(AgentVariable).nullish(),

package/dist/zod/deployments.js

@@ -31,7 +31,17 @@ export const DeploymentTarget = z
  *  (`DeploymentIn.kind`) and the response (`DeploymentOut.kind`); the API derives
  *  its accepted-kinds set from these options, so the enum is the discoverable list. */
 export const DeploymentKind = z
-    .enum(["whatsapp", "telegram", "slack", "discord", "sms", "voice", "email", "mcp"])
+    .enum([
+    "whatsapp",
+    "telegram",
+    "slack",
+    "discord",
+    "sms",
+    "voice",
+    "email",
+    "mcp",
+    "web",
+])
     .meta({ id: "DeploymentKind" });
 export const DeploymentOut = z
     .object({
@@ -46,6 +56,9 @@ export const DeploymentOut = z
     /** The connectable MCP endpoint — present only for `kind: "mcp"`. Paste into
      *  Claude / ChatGPT as the server URL; survives a later GET, not just create. */
     mcp_url: z.string().optional(),
+    /** The shareable hosted-page URL — present only for `kind: "web"`. Open in a
+     *  browser to chat with the agent; survives a later GET, not just create. */
+    page_url: z.string().optional(),
     status: z.string(),
     created_at: z.string().nullable(),
 })
@@ -59,6 +72,7 @@ export const DeploymentListOut = pageOut(DeploymentOut, "DeploymentListOut");
  * - slack `provision`/`oauth_install`: `install_url`, `state`, optional `slack_app_id`.
  * - email `provision`: no extras (plain `DeploymentOut`).
  * - mcp: `mcp_url` (on the base `DeploymentOut`, so it also survives a GET).
+ * - web: `page_url` (on the base `DeploymentOut`, so it also survives a GET).
  * All are optional — which appear depends on the kind + setup mode.
  */
 export const DeploymentCreatedOut = DeploymentOut.extend({

package/dist/zod/mcp.js

@@ -67,11 +67,17 @@ export const McpServerOut = z
     approval_policy: z.array(ApprovalRule).optional(),
     tools: z.array(McpTool),
     tools_refreshed_at: z.string().nullable(),
-    /** `degraded` when the edge failed discovery or its secret can't be decoded
-     *  at run time; otherwise the stored lifecycle status. */
+    /** `degraded` when the edge failed discovery, its secret can't be decoded at
+     *  run time, or its last `tools/call` failed at the transport level;
+     *  otherwise the stored lifecycle status. */
     status: z.string(),
-    /** Last discovery/runtime-load failure, or null when the edge is healthy. */
+    /** Last discovery/runtime-load failure, or null when discovery is healthy. */
     discovery_error: z.string().nullable(),
+    /** Last transport-level `tools/call` failure (network / HTTP status), or
+     *  null. Discovery can succeed while calls fail — this catches that. Cleared
+     *  by a successful call or a re-PUT. */
+    last_call_error: z.string().nullable(),
+    last_call_error_at: z.string().nullable(),
     created_at: z.string().nullable(),
 })
     .meta({ id: "McpServerOut" });
@@ -95,7 +101,9 @@ export const McpAuthIn = z
 })
     .meta({ id: "McpAuthIn" });
 /** Register or replace a server: supply a raw `url` + `auth`, or a `catalog`
- *  slug (catalog defaults are stamped down, body fields override). */
+ *  slug (catalog defaults are stamped down, body fields override). PUT is a
+ *  full replace and `auth.kind` is required unless a catalog preset supplies
+ *  it — there is no implicit `none`. */
 export const McpServerIn = z
     .object({
     url: z.string().nullish(),

package/dist/zod/observability.js

@@ -63,6 +63,7 @@ export const TraceOut = z
     id: z.string(),
     smith_id: z.string(),
     app_id: z.string().nullable(),
+    run_id: z.string().nullable(),
     root_kind: ICSpanKindEnum,
     name: z.string(),
     status: z.string(),

package/dist/zod/smith-revisions.js

@@ -25,8 +25,11 @@ export const SmithRevisionOut = z
         model: z.string().nullish(),
         enabled_hosted_tools: z.array(z.string()).optional(),
         vector_store_ids: z.array(z.string()).optional(),
-        auto_memory: z.boolean().optional(),
-        memory_consolidation: z.boolean().optional(),
+        mcp_servers: z.array(z.string()).nullish(),
+        // Nullish: a snapshot taken while the smith inherited a sparse agent
+        // version carries null (= the default) for these.
+        auto_memory: z.boolean().nullish(),
+        memory_consolidation: z.boolean().nullish(),
     }),
     created_by: z.string().nullish(),
     note: z.string().nullish(),

package/dist/zod/smiths.js

@@ -36,6 +36,8 @@ export const SmithOut = z
     rendered_instructions: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).optional(),
     vector_store_ids: z.array(z.string()).optional(),
+    /** Registered MCP servers this smith's runs load, by name. Null = all. */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().optional(),
     memory_consolidation: z.boolean().optional(),
     /** How the config resolved: by reference, with overrides, or embedded. */
@@ -55,6 +57,7 @@ export const SmithOut = z
         instructions: z.string().nullable(),
         enabled_hosted_tools: z.array(z.string()),
         vector_store_ids: z.array(z.string()),
+        mcp_servers: z.array(z.string()).nullable(),
         auto_memory: z.boolean().nullable(),
         memory_consolidation: z.boolean().nullable(),
     })
@@ -85,6 +88,8 @@ export const SmithCreate = z
     instructions: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope this smith's runs to these registered MCP servers (by name). */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
 })
@@ -102,6 +107,9 @@ export const SmithPatch = z
     instructions: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope this smith's runs to these registered MCP servers (by name).
+     *  Null clears the per-smith override (re-inherit the agent's value). */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
 })

package/dist/zod/tenant.js

@@ -67,6 +67,49 @@ export const WebhookPatch = z
     active: z.boolean().nullish(),
 })
     .meta({ id: "WebhookPatch" });
+/** Rotate a webhook's signing secret. `grace_seconds` keeps the outgoing secret
+ *  valid for an overlap window (default 24h, 0 = cut over immediately, max 7d);
+ *  during it every delivery is signed with both the new and old secret. */
+export const WebhookRotateIn = z
+    .object({
+    grace_seconds: z.number().int().min(0).max(604800).default(86400),
+})
+    .meta({ id: "WebhookRotateIn" });
+/** The rotate response — the new signing `secret` is returned EXACTLY ONCE, here.
+ *  `previous_secret_expires_at` is when the old secret stops being accepted. */
+export const WebhookRotateOut = z
+    .object({
+    id: z.string(),
+    secret: z.string(),
+    previous_secret_expires_at: z.string().nullable(),
+})
+    .meta({ id: "WebhookRotateOut" });
+/** One persisted delivery attempt record for a webhook — the audit trail behind
+ *  durable, retried delivery. `status` is `pending` | `succeeded` | `dead`. */
+export const WebhookDeliveryOut = z
+    .object({
+    id: z.string(),
+    event_id: z.string(),
+    event_type: z.string(),
+    url: z.string(),
+    status: z.string(),
+    attempts: z.number(),
+    last_status: z.number().nullable(),
+    last_error: z.string(),
+    next_attempt_at: z.string().nullable(),
+    delivered_at: z.string().nullable(),
+    created_at: z.string().nullable(),
+})
+    .meta({ id: "WebhookDeliveryOut" });
+export const WebhookDeliveryListOut = pageOut(WebhookDeliveryOut, "WebhookDeliveryListOut");
+/** The redeliver ack — the outcome of the forced re-attempt. */
+export const WebhookRedeliverOut = z
+    .object({
+    delivery_id: z.string(),
+    delivered: z.boolean(),
+    status: z.number().nullable(),
+})
+    .meta({ id: "WebhookRedeliverOut" });
 // ── Tokens (mint / list / revoke RS256 JWTs) ─────────────────────────────────
 /** A minted-token *summary* — the list/listing shape. The secret `token` is
  *  NEVER echoed here; it only appears in {@link MintedTokenOut} on create. */
@@ -184,6 +227,7 @@ export const ProviderOut = z
     token_uri: z.string().nullable(),
     scopes_allowed: z.array(z.string()),
     refresh_webhook: z.string().nullable(),
+    authorize_url: z.string().nullable(),
     has_client_secret: z.boolean(),
 })
     .meta({ id: "ProviderOut" });
@@ -204,8 +248,34 @@ export const ProviderIn = z
     token_uri: z.string().nullish(),
     scopes_allowed: z.array(z.string()).default([]),
     refresh_webhook: z.string().nullish(),
+    /** Tenant-hosted connector consent page (#123): the connector OAuth
+     *  authorize endpoint redirects the end-user here (`?request_id=…`)
+     *  instead of rendering the built-in connect-token page. */
+    authorize_url: z.string().nullish(),
 })
     .meta({ id: "ProviderIn" });
+// ── Delegated connector consent (connector OAuth, #123) ─────────────────────
+/** Render data for a tenant-hosted consent page: the pending authorize request
+ *  stashed by `GET /oauth/authorize` when the tenant's provider registers an
+ *  `authorize_url`. */
+export const AuthorizeRequestOut = z
+    .object({
+    client_name: z.string(),
+    target_name: z.string(),
+    tenant: z.string(),
+    resource: z.string(),
+    deployment_id: z.string(),
+})
+    .meta({ id: "AuthorizeRequestOut" });
+/** Complete the delegated grant: the tenant asserts (server-to-server) which
+ *  smith the end-user authorized. */
+export const AuthorizeCompleteIn = z
+    .object({ smith_id: z.string() })
+    .meta({ id: "AuthorizeCompleteIn" });
+/** Where the tenant 302s the browser after completing or declining. */
+export const AuthorizeRedirectOut = z
+    .object({ redirect_url: z.string() })
+    .meta({ id: "AuthorizeRedirectOut" });
 // ── Hosted-tool catalog ──────────────────────────────────────────────────────
 /** One tool hosted by Ingram Cloud that the catalog advertises. */
 export const HostedToolOut = z

package/dist/zod/vector-stores.js

@@ -7,9 +7,11 @@
  * filter grammar, and the `search_results.page` envelope are OpenAI's, wart for
  * wart (modify is `POST`, the batch object is `vector_store.files_batch`, the
  * search page uses a `next_page` token while CRUD lists use `first_id`/
- * `last_id`). `smith_id` is the one documented IC extension: it scopes a store
- * to a single smith ("" = tenant-wide), the same isolation boundary every other
- * smith-owned resource has. Expiration policies (`expires_after`), query
+ * `last_id`). Two documented IC extensions: `smith_id` scopes a store to a
+ * single smith ("" = tenant-wide), the same isolation boundary every other
+ * smith-owned resource has; `embedding_model` names the store's embedder,
+ * frozen at create (OpenAI pins one platform-wide, Gemini's File Search exposes
+ * it the same way). Expiration policies (`expires_after`), query
  * rewriting, and rankers are not implemented — the fields don't exist here
  * rather than being accepted and ignored.
  */
@@ -78,6 +80,11 @@ export const VectorStoreIn = z
     metadata: z.record(z.string(), z.unknown()).optional(),
     /** IC extension: own the store to one smith ("" / omitted = tenant-wide). */
     smith_id: z.string().optional(),
+    /** IC extension: the embedder to index and query this store with, frozen at
+     *  create (omitted = the platform default). Any model your OpenAI-provider
+     *  key can reach — including an EU-hosted OpenAI-compatible endpoint set as
+     *  that key's `base_url` — of at most 1536 dimensions. */
+    embedding_model: z.string().optional(),
 })
     .meta({ id: "VectorStoreIn" });
 export const VectorStoreFileCounts = z.object({
@@ -105,6 +112,9 @@ export const VectorStoreOut = z
     metadata: z.record(z.string(), z.unknown()),
     /** IC extension: the owning smith ("" = tenant-wide). */
     smith_id: z.string(),
+    /** IC extension: the embedder this store is indexed and queried with,
+     *  frozen at create. */
+    embedding_model: z.string(),
 })
     .meta({ id: "VectorStoreOut" });
 /** Vector stores, in OpenAI's `list` envelope. */
@@ -151,7 +161,12 @@ export const VectorStoreFileOut = z
     status: z.enum(["in_progress", "completed", "failed", "cancelled"]),
     last_error: z
         .object({
-        code: z.enum(["server_error", "unsupported_file", "invalid_file"]),
+        code: z.enum([
+            "server_error",
+            "unsupported_file",
+            "no_text_layer",
+            "invalid_file",
+        ]),
         message: z.string(),
     })
         .nullable(),
@@ -174,6 +189,17 @@ export const VectorStoreFileUpdate = z
     attributes: VectorStoreAttributes.nullable(),
 })
     .meta({ id: "VectorStoreFileUpdate" });
+/** The parsed text a file was indexed as, chunk by chunk, in OpenAI's
+ *  `vector_store.file_content.page` envelope. The whole file is one page — the
+ *  paging fields are the envelope's shape, not a promise of more. */
+export const VectorStoreFileContentOut = z
+    .object({
+    object: z.literal("vector_store.file_content.page"),
+    data: z.array(z.object({ type: z.literal("text"), text: z.string() })),
+    has_more: z.literal(false),
+    next_page: z.null(),
+})
+    .meta({ id: "VectorStoreFileContentOut" });
 export const VectorStoreFileDeleted = z
     .object({
     id: z.string(),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-cloud/sdk",
-	"version": "1.1.0",
+	"version": "1.4.0",
 	"description": "Typed wire contract + management-plane client for the Ingram Cloud API: Zod schemas to validate request/response bodies, TypeScript types for the JSON you read back, SSE/webhook event types, and a typed REST client.",
 	"license": "MIT",
 	"type": "module",
@@ -56,10 +56,10 @@
 		"prepublishOnly": "bun run build"
 	},
 	"devDependencies": {
-		"@ingram-tech/oxlint-config": "^0.2.1",
-		"oxfmt": "^0.57.0",
-		"oxlint": "^1.70.0",
-		"typescript": "^6.0.0"
+		"@ingram-tech/oxlint-config": "^0.2.2",
+		"oxfmt": "^0.58.0",
+		"oxlint": "^1.73.0",
+		"typescript": "^6"
 	},
 	"dependencies": {
 		"zod": "^4.4.3"

package/ts/client.ts

@@ -29,6 +29,7 @@ import type {
 	ICAgent,
 	ICAgentVersion,
 	ICApproval,
+	ICAuthorizeRequest,
 	ICBudget,
 	ICBudgetStatus,
 	ICCatalogEntry,
@@ -63,11 +64,13 @@ import type {
 	ICUiResource,
 	ICUsage,
 	ICUsageBreakdown,
+	ICUsageEvent,
 	ICVectorStore,
 	ICVectorStoreFile,
 	ICVectorStoreFileBatch,
 	ICVectorStoreSearchPage,
 	ICWebhook,
+	ICWebhookDelivery,
 	ICWhatsAppConfig,
 	ICWorkingMemory,
 } from "./responses.js";
@@ -110,6 +113,8 @@ import type { RestoreIn } from "./zod/smith-revisions.js";
 import type { SmithCreate, SmithPatch } from "./zod/smiths.js";
 import type { TelegramBotIn } from "./zod/telegram.js";
 import type {
+	AuthorizeCompleteIn,
+	AuthorizeRedirectOut,
 	HostedToolOut,
 	ModelKeyConfiguredOut,
 	ModelKeyIn,
@@ -119,6 +124,9 @@ import type {
 	WebhookCreateOut,
 	WebhookIn,
 	WebhookPatch,
+	WebhookRedeliverOut,
+	WebhookRotateIn,
+	WebhookRotateOut,
 } from "./zod/tenant.js";
 import type { WhatsAppConfigIn } from "./zod/whatsapp.js";
 
@@ -445,6 +453,30 @@ export class IngramCloud {
 				),
 		},
 
+		/** End-user BYOK (#170): a smith's own provider keys, resolved ahead of the
+		 *  tenant's so the end-user's provider account is billed. Never read back. */
+		modelKeys: {
+			list: (pid: string, opts?: RequestOptions) =>
+				this.data<ICModelKey>("GET", `/smiths/${enc(pid)}/model_keys`, opts),
+			put: (
+				pid: string,
+				provider: string,
+				body: z.input<typeof ModelKeyIn>,
+				opts?: RequestOptions,
+			) =>
+				this.json<z.infer<typeof ModelKeyConfiguredOut>>(
+					"PUT",
+					`/smiths/${enc(pid)}/model_keys/${enc(provider)}`,
+					{ ...opts, body },
+				),
+			delete: (pid: string, provider: string, opts?: RequestOptions) =>
+				this.empty(
+					"DELETE",
+					`/smiths/${enc(pid)}/model_keys/${enc(provider)}`,
+					opts,
+				),
+		},
+
 		schedules: {
 			list: (pid: string, opts?: RequestOptions) =>
 				this.data<ICSchedule>("GET", `/smiths/${enc(pid)}/schedules`, opts),
@@ -653,6 +685,14 @@ export class IngramCloud {
 					rawBody: form,
 				});
 			},
+			/** The template's HTML bundle — the same bytes the agent's MCP endpoint
+			 *  serves, so a host can render a panel without vendoring a copy.
+			 *  Tenant-authed: call it server-side and proxy to your chat UI. */
+			content: (aid: string, name: string, opts?: RequestOptions) =>
+				this.request("GET", `/agents/${enc(aid)}/ui/${enc(name)}/content`, {
+					...opts,
+					headers: { accept: "text/html", ...opts?.headers },
+				}).then((r) => r.text()),
 			delete: (aid: string, name: string, opts?: RequestOptions) =>
 				this.json<{ name: string; deleted: boolean }>(
 					"DELETE",
@@ -811,6 +851,18 @@ export class IngramCloud {
 			},
 			opts?: RequestOptions,
 		) => this.json<ICUsageBreakdown>("GET", "/usage", { ...opts, query }),
+		/** The raw billable-usage event ledger (keyset-paginated, newest first) — the
+		 *  per-event rows the breakdown aggregates. */
+		events: (
+			query?: PageOpts & {
+				smith_id?: string;
+				meter?: string;
+				customer_id?: string;
+				from?: string;
+				to?: string;
+			},
+			opts?: RequestOptions,
+		) => this.page<ICUsageEvent>("/usage/events", query, opts),
 	};
 
 	// ── Files (the OpenAI Files API) ─────────────────────────────────────────
@@ -1016,12 +1068,38 @@ export class IngramCloud {
 				}),
 			delete: (wid: string, opts?: RequestOptions) =>
 				this.empty("DELETE", `/tenant/webhooks/${enc(wid)}`, opts),
+			/** Rotate the signing secret, returning the new one exactly once. Pass
+			 *  `grace_seconds` to keep the old secret accepted during an overlap window. */
+			rotateSecret: (
+				wid: string,
+				body?: z.input<typeof WebhookRotateIn>,
+				opts?: RequestOptions,
+			) =>
+				this.json<z.infer<typeof WebhookRotateOut>>(
+					"POST",
+					`/tenant/webhooks/${enc(wid)}/rotate_secret`,
+					{ ...opts, body: body ?? {} },
+				),
 			test: (wid: string, opts?: RequestOptions) =>
 				this.json<{ delivered: boolean }>(
 					"POST",
 					`/tenant/webhooks/${enc(wid)}/test`,
 					opts,
 				),
+			/** The persisted delivery attempts for a webhook (durable retry audit trail). */
+			deliveries: (wid: string, query?: PageOpts, opts?: RequestOptions) =>
+				this.page<ICWebhookDelivery>(
+					`/tenant/webhooks/${enc(wid)}/deliveries`,
+					query,
+					opts,
+				),
+			/** Force a fresh delivery attempt for one record (e.g. after the endpoint recovers). */
+			redeliver: (wid: string, did: string, opts?: RequestOptions) =>
+				this.json<z.infer<typeof WebhookRedeliverOut>>(
+					"POST",
+					`/tenant/webhooks/${enc(wid)}/deliveries/${enc(did)}/redeliver`,
+					opts,
+				),
 		},
 
 		providers: {
@@ -1146,7 +1224,40 @@ export class IngramCloud {
 		},
 	};
 
-	// ── Organization (org token: projects + billing) ────────────────────────
+	// ── Delegated connector consent (connector OAuth, #123) ─────────────────
+	// Tenant-admin token. The tenant's hosted consent page (the provider's
+	// `authorize_url`) reads the pending request, then completes or declines it
+	// server-to-server; the returned `redirect_url` is where to 302 the browser.
+
+	readonly oauth = {
+		authorizeRequests: {
+			get: (requestId: string, opts?: RequestOptions) =>
+				this.json<ICAuthorizeRequest>(
+					"GET",
+					`/oauth/authorize-requests/${enc(requestId)}`,
+					opts,
+				),
+			complete: (
+				requestId: string,
+				body: z.input<typeof AuthorizeCompleteIn>,
+				opts?: RequestOptions,
+			) =>
+				this.json<z.infer<typeof AuthorizeRedirectOut>>(
+					"POST",
+					`/oauth/authorize-requests/${enc(requestId)}/complete`,
+					{ ...opts, body },
+				),
+			decline: (requestId: string, opts?: RequestOptions) =>
+				this.json<z.infer<typeof AuthorizeRedirectOut>>(
+					"POST",
+					`/oauth/authorize-requests/${enc(requestId)}/decline`,
+					opts,
+				),
+		},
+	};
+
+	// ── Organization (org token: projects + tokens) ─────────────────────────
+	// Note: the `/v1/organization/billing/*` surface is not yet wrapped here.
 
 	readonly organization = {
 		projects: {

package/ts/responses.ts

@@ -52,6 +52,7 @@ export type {
 	ICTrace,
 	ICTraceDetail,
 	ICUsageBreakdown,
+	ICUsageEvent,
 } from "./zod/observability.js";
 export type { ICProject } from "./zod/projects.js";
 export type { ICRun, ICRunUsage, ICInputMessage, ICRunEvent } from "./zod/runs.js";
@@ -63,6 +64,7 @@ export type { ICTelegramBot } from "./zod/telegram.js";
 export type {
 	ICEvent,
 	ICWebhook,
+	ICWebhookDelivery,
 	ICToken,
 	ICMintedToken,
 	ICUsage,
@@ -71,6 +73,7 @@ export type {
 	ICModelCatalog,
 	ICModelKey,
 	ICProvider,
+	ICAuthorizeRequest,
 } from "./zod/tenant.js";
 export type { ICWhatsAppConfig } from "./zod/whatsapp.js";
 export type {

package/ts/zod/agents.ts

@@ -72,6 +72,8 @@ export const AgentDraft = z
 		model: z.string().nullable(),
 		enabled_hosted_tools: z.array(z.string()),
 		vector_store_ids: z.array(z.string()),
+		/** Registered MCP servers this agent's smiths load, by name. Null = all. */
+		mcp_servers: z.array(z.string()).nullable(),
 		auto_memory: z.boolean().nullable(),
 		memory_consolidation: z.boolean().nullable(),
 		variables: z.array(AgentVariable),
@@ -93,6 +95,8 @@ export const AgentOut = z
 		rollout_version: z.number().int().nullable(),
 		rollout_percent: z.number().int(),
 		smith_count: z.number().int().optional(),
+		/** Newest run across every smith of this agent. Null until one runs. */
+		last_activity_at: z.string().nullable().optional(),
 		created_at: z.string().nullable(),
 		updated_at: z.string().nullable(),
 	})
@@ -109,6 +113,7 @@ export const AgentVersionOut = z
 			model: z.string().nullish(),
 			enabled_hosted_tools: z.array(z.string()).optional(),
 			vector_store_ids: z.array(z.string()).optional(),
+			mcp_servers: z.array(z.string()).nullish(),
 			auto_memory: z.boolean().nullish(),
 			memory_consolidation: z.boolean().nullish(),
 			variables: z.array(AgentVariable).optional(),
@@ -134,6 +139,8 @@ export const AgentIn = z
 		model: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope runs to these registered MCP servers (by name). Null/omitted = all. */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 		variables: z.array(AgentVariable).nullish(),
@@ -147,6 +154,9 @@ export const AgentPatch = z
 		model: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope runs to these registered MCP servers (by name). An explicit null
+		 *  clears the restriction (= all); omitted leaves it unchanged. */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 		variables: z.array(AgentVariable).nullish(),

package/ts/zod/deployments.ts

@@ -33,7 +33,17 @@ export const DeploymentTarget = z
  *  (`DeploymentIn.kind`) and the response (`DeploymentOut.kind`); the API derives
  *  its accepted-kinds set from these options, so the enum is the discoverable list. */
 export const DeploymentKind = z
-	.enum(["whatsapp", "telegram", "slack", "discord", "sms", "voice", "email", "mcp"])
+	.enum([
+		"whatsapp",
+		"telegram",
+		"slack",
+		"discord",
+		"sms",
+		"voice",
+		"email",
+		"mcp",
+		"web",
+	])
 	.meta({ id: "DeploymentKind" });
 
 export const DeploymentOut = z
@@ -49,6 +59,9 @@ export const DeploymentOut = z
 		/** The connectable MCP endpoint — present only for `kind: "mcp"`. Paste into
 		 *  Claude / ChatGPT as the server URL; survives a later GET, not just create. */
 		mcp_url: z.string().optional(),
+		/** The shareable hosted-page URL — present only for `kind: "web"`. Open in a
+		 *  browser to chat with the agent; survives a later GET, not just create. */
+		page_url: z.string().optional(),
 		status: z.string(),
 		created_at: z.string().nullable(),
 	})
@@ -64,6 +77,7 @@ export const DeploymentListOut = pageOut(DeploymentOut, "DeploymentListOut");
  * - slack `provision`/`oauth_install`: `install_url`, `state`, optional `slack_app_id`.
  * - email `provision`: no extras (plain `DeploymentOut`).
  * - mcp: `mcp_url` (on the base `DeploymentOut`, so it also survives a GET).
+ * - web: `page_url` (on the base `DeploymentOut`, so it also survives a GET).
  * All are optional — which appear depends on the kind + setup mode.
  */
 export const DeploymentCreatedOut = DeploymentOut.extend({

package/ts/zod/mcp.ts

@@ -72,11 +72,17 @@ export const McpServerOut = z
 		approval_policy: z.array(ApprovalRule).optional(),
 		tools: z.array(McpTool),
 		tools_refreshed_at: z.string().nullable(),
-		/** `degraded` when the edge failed discovery or its secret can't be decoded
-		 *  at run time; otherwise the stored lifecycle status. */
+		/** `degraded` when the edge failed discovery, its secret can't be decoded at
+		 *  run time, or its last `tools/call` failed at the transport level;
+		 *  otherwise the stored lifecycle status. */
 		status: z.string(),
-		/** Last discovery/runtime-load failure, or null when the edge is healthy. */
+		/** Last discovery/runtime-load failure, or null when discovery is healthy. */
 		discovery_error: z.string().nullable(),
+		/** Last transport-level `tools/call` failure (network / HTTP status), or
+		 *  null. Discovery can succeed while calls fail — this catches that. Cleared
+		 *  by a successful call or a re-PUT. */
+		last_call_error: z.string().nullable(),
+		last_call_error_at: z.string().nullable(),
 		created_at: z.string().nullable(),
 	})
 	.meta({ id: "McpServerOut" });
@@ -105,7 +111,9 @@ export const McpAuthIn = z
 	.meta({ id: "McpAuthIn" });
 
 /** Register or replace a server: supply a raw `url` + `auth`, or a `catalog`
- *  slug (catalog defaults are stamped down, body fields override). */
+ *  slug (catalog defaults are stamped down, body fields override). PUT is a
+ *  full replace and `auth.kind` is required unless a catalog preset supplies
+ *  it — there is no implicit `none`. */
 export const McpServerIn = z
 	.object({
 		url: z.string().nullish(),

package/ts/zod/observability.ts

@@ -67,6 +67,7 @@ export const TraceOut = z
 		id: z.string(),
 		smith_id: z.string(),
 		app_id: z.string().nullable(),
+		run_id: z.string().nullable(),
 		root_kind: ICSpanKindEnum,
 		name: z.string(),
 		status: z.string(),
@@ -153,3 +154,4 @@ export type ICSpanNode = z.infer<typeof SpanNodeOut>;
 export type ICTrace = z.infer<typeof TraceOut>;
 export type ICTraceDetail = z.infer<typeof TraceDetailOut>;
 export type ICUsageBreakdown = z.infer<typeof UsageBreakdownOut>;
+export type ICUsageEvent = z.infer<typeof UsageEventOut>;

package/ts/zod/smith-revisions.ts

@@ -26,8 +26,11 @@ export const SmithRevisionOut = z
 			model: z.string().nullish(),
 			enabled_hosted_tools: z.array(z.string()).optional(),
 			vector_store_ids: z.array(z.string()).optional(),
-			auto_memory: z.boolean().optional(),
-			memory_consolidation: z.boolean().optional(),
+			mcp_servers: z.array(z.string()).nullish(),
+			// Nullish: a snapshot taken while the smith inherited a sparse agent
+			// version carries null (= the default) for these.
+			auto_memory: z.boolean().nullish(),
+			memory_consolidation: z.boolean().nullish(),
 		}),
 		created_by: z.string().nullish(),
 		note: z.string().nullish(),

package/ts/zod/smiths.ts

@@ -38,6 +38,8 @@ export const SmithOut = z
 		rendered_instructions: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).optional(),
 		vector_store_ids: z.array(z.string()).optional(),
+		/** Registered MCP servers this smith's runs load, by name. Null = all. */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().optional(),
 		memory_consolidation: z.boolean().optional(),
 		/** How the config resolved: by reference, with overrides, or embedded. */
@@ -57,6 +59,7 @@ export const SmithOut = z
 				instructions: z.string().nullable(),
 				enabled_hosted_tools: z.array(z.string()),
 				vector_store_ids: z.array(z.string()),
+				mcp_servers: z.array(z.string()).nullable(),
 				auto_memory: z.boolean().nullable(),
 				memory_consolidation: z.boolean().nullable(),
 			})
@@ -90,6 +93,8 @@ export const SmithCreate = z
 		instructions: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope this smith's runs to these registered MCP servers (by name). */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 	})
@@ -108,6 +113,9 @@ export const SmithPatch = z
 		instructions: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope this smith's runs to these registered MCP servers (by name).
+		 *  Null clears the per-smith override (re-inherit the agent's value). */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 	})

package/ts/zod/tenant.ts

@@ -78,6 +78,54 @@ export const WebhookPatch = z
 	})
 	.meta({ id: "WebhookPatch" });
 
+/** Rotate a webhook's signing secret. `grace_seconds` keeps the outgoing secret
+ *  valid for an overlap window (default 24h, 0 = cut over immediately, max 7d);
+ *  during it every delivery is signed with both the new and old secret. */
+export const WebhookRotateIn = z
+	.object({
+		grace_seconds: z.number().int().min(0).max(604800).default(86400),
+	})
+	.meta({ id: "WebhookRotateIn" });
+
+/** The rotate response — the new signing `secret` is returned EXACTLY ONCE, here.
+ *  `previous_secret_expires_at` is when the old secret stops being accepted. */
+export const WebhookRotateOut = z
+	.object({
+		id: z.string(),
+		secret: z.string(),
+		previous_secret_expires_at: z.string().nullable(),
+	})
+	.meta({ id: "WebhookRotateOut" });
+
+/** One persisted delivery attempt record for a webhook — the audit trail behind
+ *  durable, retried delivery. `status` is `pending` | `succeeded` | `dead`. */
+export const WebhookDeliveryOut = z
+	.object({
+		id: z.string(),
+		event_id: z.string(),
+		event_type: z.string(),
+		url: z.string(),
+		status: z.string(),
+		attempts: z.number(),
+		last_status: z.number().nullable(),
+		last_error: z.string(),
+		next_attempt_at: z.string().nullable(),
+		delivered_at: z.string().nullable(),
+		created_at: z.string().nullable(),
+	})
+	.meta({ id: "WebhookDeliveryOut" });
+
+export const WebhookDeliveryListOut = pageOut(WebhookDeliveryOut, "WebhookDeliveryListOut");
+
+/** The redeliver ack — the outcome of the forced re-attempt. */
+export const WebhookRedeliverOut = z
+	.object({
+		delivery_id: z.string(),
+		delivered: z.boolean(),
+		status: z.number().nullable(),
+	})
+	.meta({ id: "WebhookRedeliverOut" });
+
 // ── Tokens (mint / list / revoke RS256 JWTs) ─────────────────────────────────
 
 /** A minted-token *summary* — the list/listing shape. The secret `token` is
@@ -213,6 +261,7 @@ export const ProviderOut = z
 		token_uri: z.string().nullable(),
 		scopes_allowed: z.array(z.string()),
 		refresh_webhook: z.string().nullable(),
+		authorize_url: z.string().nullable(),
 		has_client_secret: z.boolean(),
 	})
 	.meta({ id: "ProviderOut" });
@@ -236,9 +285,39 @@ export const ProviderIn = z
 		token_uri: z.string().nullish(),
 		scopes_allowed: z.array(z.string()).default([]),
 		refresh_webhook: z.string().nullish(),
+		/** Tenant-hosted connector consent page (#123): the connector OAuth
+		 *  authorize endpoint redirects the end-user here (`?request_id=…`)
+		 *  instead of rendering the built-in connect-token page. */
+		authorize_url: z.string().nullish(),
 	})
 	.meta({ id: "ProviderIn" });
 
+// ── Delegated connector consent (connector OAuth, #123) ─────────────────────
+
+/** Render data for a tenant-hosted consent page: the pending authorize request
+ *  stashed by `GET /oauth/authorize` when the tenant's provider registers an
+ *  `authorize_url`. */
+export const AuthorizeRequestOut = z
+	.object({
+		client_name: z.string(),
+		target_name: z.string(),
+		tenant: z.string(),
+		resource: z.string(),
+		deployment_id: z.string(),
+	})
+	.meta({ id: "AuthorizeRequestOut" });
+
+/** Complete the delegated grant: the tenant asserts (server-to-server) which
+ *  smith the end-user authorized. */
+export const AuthorizeCompleteIn = z
+	.object({ smith_id: z.string() })
+	.meta({ id: "AuthorizeCompleteIn" });
+
+/** Where the tenant 302s the browser after completing or declining. */
+export const AuthorizeRedirectOut = z
+	.object({ redirect_url: z.string() })
+	.meta({ id: "AuthorizeRedirectOut" });
+
 // ── Hosted-tool catalog ──────────────────────────────────────────────────────
 
 /** One tool hosted by Ingram Cloud that the catalog advertises. */
@@ -257,6 +336,7 @@ export const HostedToolsListOut = z
 
 export type ICEvent = z.infer<typeof EventOut>;
 export type ICWebhook = z.infer<typeof WebhookOut>;
+export type ICWebhookDelivery = z.infer<typeof WebhookDeliveryOut>;
 export type ICToken = z.infer<typeof TokenOut>;
 export type ICMintedToken = z.infer<typeof MintedTokenOut>;
 export type ICUsage = z.infer<typeof UsageOut>;
@@ -265,3 +345,4 @@ export type ICModelProvider = z.infer<typeof ModelProviderOut>;
 export type ICModelCatalog = z.infer<typeof ModelsListOut>;
 export type ICModelKey = z.infer<typeof ModelKeyOut>;
 export type ICProvider = z.infer<typeof ProviderOut>;
+export type ICAuthorizeRequest = z.infer<typeof AuthorizeRequestOut>;

package/ts/zod/vector-stores.ts

@@ -7,9 +7,11 @@
  * filter grammar, and the `search_results.page` envelope are OpenAI's, wart for
  * wart (modify is `POST`, the batch object is `vector_store.files_batch`, the
  * search page uses a `next_page` token while CRUD lists use `first_id`/
- * `last_id`). `smith_id` is the one documented IC extension: it scopes a store
- * to a single smith ("" = tenant-wide), the same isolation boundary every other
- * smith-owned resource has. Expiration policies (`expires_after`), query
+ * `last_id`). Two documented IC extensions: `smith_id` scopes a store to a
+ * single smith ("" = tenant-wide), the same isolation boundary every other
+ * smith-owned resource has; `embedding_model` names the store's embedder,
+ * frozen at create (OpenAI pins one platform-wide, Gemini's File Search exposes
+ * it the same way). Expiration policies (`expires_after`), query
  * rewriting, and rankers are not implemented — the fields don't exist here
  * rather than being accepted and ignored.
  */
@@ -95,6 +97,11 @@ export const VectorStoreIn = z
 		metadata: z.record(z.string(), z.unknown()).optional(),
 		/** IC extension: own the store to one smith ("" / omitted = tenant-wide). */
 		smith_id: z.string().optional(),
+		/** IC extension: the embedder to index and query this store with, frozen at
+		 *  create (omitted = the platform default). Any model your OpenAI-provider
+		 *  key can reach — including an EU-hosted OpenAI-compatible endpoint set as
+		 *  that key's `base_url` — of at most 1536 dimensions. */
+		embedding_model: z.string().optional(),
 	})
 	.meta({ id: "VectorStoreIn" });
 
@@ -124,6 +131,9 @@ export const VectorStoreOut = z
 		metadata: z.record(z.string(), z.unknown()),
 		/** IC extension: the owning smith ("" = tenant-wide). */
 		smith_id: z.string(),
+		/** IC extension: the embedder this store is indexed and queried with,
+		 *  frozen at create. */
+		embedding_model: z.string(),
 	})
 	.meta({ id: "VectorStoreOut" });
 
@@ -176,7 +186,12 @@ export const VectorStoreFileOut = z
 		status: z.enum(["in_progress", "completed", "failed", "cancelled"]),
 		last_error: z
 			.object({
-				code: z.enum(["server_error", "unsupported_file", "invalid_file"]),
+				code: z.enum([
+					"server_error",
+					"unsupported_file",
+					"no_text_layer",
+					"invalid_file",
+				]),
 				message: z.string(),
 			})
 			.nullable(),
@@ -202,6 +217,18 @@ export const VectorStoreFileUpdate = z
 	})
 	.meta({ id: "VectorStoreFileUpdate" });
 
+/** The parsed text a file was indexed as, chunk by chunk, in OpenAI's
+ *  `vector_store.file_content.page` envelope. The whole file is one page — the
+ *  paging fields are the envelope's shape, not a promise of more. */
+export const VectorStoreFileContentOut = z
+	.object({
+		object: z.literal("vector_store.file_content.page"),
+		data: z.array(z.object({ type: z.literal("text"), text: z.string() })),
+		has_more: z.literal(false),
+		next_page: z.null(),
+	})
+	.meta({ id: "VectorStoreFileContentOut" });
+
 export const VectorStoreFileDeleted = z
 	.object({
 		id: z.string(),
@@ -291,6 +318,7 @@ export const VectorStoreSearchOut = z
 
 export type ICVectorStore = z.infer<typeof VectorStoreOut>;
 export type ICVectorStoreFile = z.infer<typeof VectorStoreFileOut>;
+export type ICVectorStoreFileContentPage = z.infer<typeof VectorStoreFileContentOut>;
 export type ICVectorStoreFileBatch = z.infer<typeof VectorStoreFileBatchOut>;
 export type ICVectorStoreSearchPage = z.infer<typeof VectorStoreSearchOut>;
 export type ICVectorStoreAttributes = z.infer<typeof VectorStoreAttributes>;