@ingram-cloud/sdk 1.10.0 → 1.12.0

package/dist/client.js

@@ -354,7 +354,7 @@ export class IngramCloud {
             list: (aid, opts) => this.data("GET", `/agents/${enc(aid)}/ui`, opts),
             get: (aid, name, opts) => this.json("GET", `/agents/${enc(aid)}/ui/${enc(name)}`, opts),
             /** Upload/replace a template — `html` is the bundle, `meta` its
-             *  `{ name, csp?, permissions?, tool? }` sidecar. Replaces by name. */
+             *  `UiResourceIn` sidecar. Replaces by name. */
             put: (aid, html, meta, opts) => {
                 const form = new FormData();
                 form.append("file", html instanceof Blob

package/dist/zod/agents.js

@@ -23,8 +23,8 @@ export const AgentVariable = z
     required: z.boolean().optional(),
 })
     .meta({ id: "AgentVariable" });
-/** A predeclared UI-backed capability (Rung 2) bound to a UI template — the MCP
- *  host's model calls it as a typed tool and the template renders the result. */
+/** A typed app-tool bound to a UI template: the MCP host's model (or the
+ *  rendered panel) calls it and the template renders the result. */
 export const UiResourceTool = z
     .object({
     description: z.string(),
@@ -32,8 +32,12 @@ export const UiResourceTool = z
     input_schema: z.record(z.string(), z.unknown()).optional(),
     /** Scoped instruction the smith runs with when this tool is called. */
     instruction: z.string().nullish(),
-    /** Writes gate through approval; reads flow freely (OpenUI Query/Mutation). */
+    /** Writes gate through approval; reads flow freely. */
     mutating: z.boolean().optional(),
+    /** Who may call the tool — the MCP Apps `_meta.ui.visibility` list. Omitted
+     *  means both; `["app"]` hides it from the host's model so only the rendered
+     *  panel can call it (a refresh or a paginated read). */
+    visibility: z.array(z.enum(["model", "app"])).optional(),
 })
     .meta({ id: "UiResourceTool" });
 /** CSP domain allowlists for the sandboxed iframe — the MCP Apps `_meta.ui.csp`
@@ -46,19 +50,30 @@ export const UiCsp = z
     baseUriDomains: z.array(z.string()).optional(),
 })
     .meta({ id: "UiCsp" });
+/** The authored metadata of a UI template — one set of fields shared by the
+ *  upload sidecar and the stored resource. `csp`, `permissions`, `prefers_border`
+ *  and `domain` are the MCP Apps resource `_meta.ui`, echoed to the host verbatim. */
+const uiTemplateMeta = {
+    csp: UiCsp.nullish(),
+    /** Host permissions the template requests, a Permissions-Policy-style map
+     *  (e.g. `{ "camera": {}, "microphone": {} }`). */
+    permissions: z.record(z.string(), z.unknown()).nullish(),
+    /** Whether the host should draw its own border around the panel. Omitted
+     *  leaves it to the host (Claude: borderless on web, bordered on mobile). */
+    prefers_border: z.boolean().nullish(),
+    /** A stable sandbox origin for the panel, in the host's own format — needed
+     *  only when the panel runs its own OAuth flow or is CORS-allowlisted. */
+    domain: z.string().nullish(),
+    tool: UiResourceTool.nullish(),
+};
 /** A tenant-authored interactive UI template (MCP Apps, SEP-1865) attached to an
  *  agent. The HTML bundle lives in blob storage; this is its wire metadata (the
- *  internal blob ref is never exposed). `csp`/`permissions` mirror the standard
- *  `_meta.ui` shape and are echoed to the host on `resources/read`. */
+ *  internal blob ref is never exposed). */
 export const UiResource = z
     .object({
     name: z.string(),
     content_hash: z.string(),
-    csp: UiCsp.optional(),
-    /** Host permissions the template requests, a Permissions-Policy-style map
-     *  (e.g. `{ "camera": {}, "microphone": {} }`). */
-    permissions: z.record(z.string(), z.unknown()).optional(),
-    tool: UiResourceTool.nullish(),
+    ...uiTemplateMeta,
 })
     .meta({ id: "UiResource" });
 /** The mutable draft head — what the next publish snapshots. */
@@ -180,9 +195,7 @@ export const UiResourceIn = z
         .string()
         .regex(/^[a-z0-9][a-z0-9_-]*$/, "lowercase letters, digits, - and _")
         .max(63),
-    csp: UiCsp.nullish(),
-    permissions: z.record(z.string(), z.unknown()).nullish(),
-    tool: UiResourceTool.nullish(),
+    ...uiTemplateMeta,
 })
     .meta({ id: "UiResourceIn" });
 export const UiResourceListOut = z

package/dist/zod/tenant.js

@@ -285,11 +285,30 @@ export const AuthorizeRequestOut = z
     deployment_id: z.string(),
 })
     .meta({ id: "AuthorizeRequestOut" });
+/** Who consented, for an `app` request that asked for `openid`.
+ *
+ *  The consent page is the only party that ever sees the person — the API is
+ *  handed an organization token and would otherwise learn nothing about them.
+ *  So the page asserts the identity here, and the API signs it into an
+ *  `id_token` the app can verify against the published JWKS. OIDC claim names,
+ *  because that is what an app already knows how to read. */
+export const AuthorizeUser = z
+    .object({
+    sub: z.string(),
+    email: z.string().nullish(),
+    email_verified: z.boolean().nullish(),
+    name: z.string().nullish(),
+    picture: z.string().nullish(),
+})
+    .meta({ id: "AuthorizeUser" });
 /** Complete the delegated grant server-to-server. A `connector` request names
- *  the smith the end-user authorized; an `app` request carries nothing — the
- *  organization is the token's. */
+ *  the smith the end-user authorized; an `app` request carries the organization
+ *  implicitly (it is the token's) and `user` when `openid` was requested. */
 export const AuthorizeCompleteIn = z
-    .object({ smith_id: z.string().nullish() })
+    .object({
+    smith_id: z.string().nullish(),
+    user: AuthorizeUser.nullish(),
+})
     .meta({ id: "AuthorizeCompleteIn" });
 /** Where the tenant 302s the browser after completing or declining. */
 export const AuthorizeRedirectOut = z

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-cloud/sdk",
-	"version": "1.10.0",
+	"version": "1.12.0",
 	"description": "Typed wire contract + management-plane client for the Ingram Cloud API: Zod schemas to validate request/response bodies, TypeScript types for the JSON you read back, SSE/webhook event types, and a typed REST client.",
 	"keywords": [
 		"api",
@@ -63,7 +63,7 @@
 		"prepack": "bun run build"
 	},
 	"dependencies": {
-		"zod": "^4.4.3"
+		"zod": "^4.5.4"
 	},
 	"devDependencies": {
 		"vitest": "^4.1.10"

package/ts/client.ts

@@ -832,7 +832,7 @@ export class IngramCloud {
 					opts,
 				),
 			/** Upload/replace a template — `html` is the bundle, `meta` its
-			 *  `{ name, csp?, permissions?, tool? }` sidecar. Replaces by name. */
+			 *  `UiResourceIn` sidecar. Replaces by name. */
 			put: (
 				aid: string,
 				html: string | Blob,

package/ts/zod/agents.ts

@@ -25,8 +25,8 @@ export const AgentVariable = z
 	})
 	.meta({ id: "AgentVariable" });
 
-/** A predeclared UI-backed capability (Rung 2) bound to a UI template — the MCP
- *  host's model calls it as a typed tool and the template renders the result. */
+/** A typed app-tool bound to a UI template: the MCP host's model (or the
+ *  rendered panel) calls it and the template renders the result. */
 export const UiResourceTool = z
 	.object({
 		description: z.string(),
@@ -34,8 +34,12 @@ export const UiResourceTool = z
 		input_schema: z.record(z.string(), z.unknown()).optional(),
 		/** Scoped instruction the smith runs with when this tool is called. */
 		instruction: z.string().nullish(),
-		/** Writes gate through approval; reads flow freely (OpenUI Query/Mutation). */
+		/** Writes gate through approval; reads flow freely. */
 		mutating: z.boolean().optional(),
+		/** Who may call the tool — the MCP Apps `_meta.ui.visibility` list. Omitted
+		 *  means both; `["app"]` hides it from the host's model so only the rendered
+		 *  panel can call it (a refresh or a paginated read). */
+		visibility: z.array(z.enum(["model", "app"])).optional(),
 	})
 	.meta({ id: "UiResourceTool" });
 
@@ -50,19 +54,31 @@ export const UiCsp = z
 	})
 	.meta({ id: "UiCsp" });
 
+/** The authored metadata of a UI template — one set of fields shared by the
+ *  upload sidecar and the stored resource. `csp`, `permissions`, `prefers_border`
+ *  and `domain` are the MCP Apps resource `_meta.ui`, echoed to the host verbatim. */
+const uiTemplateMeta = {
+	csp: UiCsp.nullish(),
+	/** Host permissions the template requests, a Permissions-Policy-style map
+	 *  (e.g. `{ "camera": {}, "microphone": {} }`). */
+	permissions: z.record(z.string(), z.unknown()).nullish(),
+	/** Whether the host should draw its own border around the panel. Omitted
+	 *  leaves it to the host (Claude: borderless on web, bordered on mobile). */
+	prefers_border: z.boolean().nullish(),
+	/** A stable sandbox origin for the panel, in the host's own format — needed
+	 *  only when the panel runs its own OAuth flow or is CORS-allowlisted. */
+	domain: z.string().nullish(),
+	tool: UiResourceTool.nullish(),
+};
+
 /** A tenant-authored interactive UI template (MCP Apps, SEP-1865) attached to an
  *  agent. The HTML bundle lives in blob storage; this is its wire metadata (the
- *  internal blob ref is never exposed). `csp`/`permissions` mirror the standard
- *  `_meta.ui` shape and are echoed to the host on `resources/read`. */
+ *  internal blob ref is never exposed). */
 export const UiResource = z
 	.object({
 		name: z.string(),
 		content_hash: z.string(),
-		csp: UiCsp.optional(),
-		/** Host permissions the template requests, a Permissions-Policy-style map
-		 *  (e.g. `{ "camera": {}, "microphone": {} }`). */
-		permissions: z.record(z.string(), z.unknown()).optional(),
-		tool: UiResourceTool.nullish(),
+		...uiTemplateMeta,
 	})
 	.meta({ id: "UiResource" });
 
@@ -197,9 +213,7 @@ export const UiResourceIn = z
 			.string()
 			.regex(/^[a-z0-9][a-z0-9_-]*$/, "lowercase letters, digits, - and _")
 			.max(63),
-		csp: UiCsp.nullish(),
-		permissions: z.record(z.string(), z.unknown()).nullish(),
-		tool: UiResourceTool.nullish(),
+		...uiTemplateMeta,
 	})
 	.meta({ id: "UiResourceIn" });
 

package/ts/zod/tenant.ts

@@ -328,11 +328,31 @@ export const AuthorizeRequestOut = z
 	})
 	.meta({ id: "AuthorizeRequestOut" });
 
+/** Who consented, for an `app` request that asked for `openid`.
+ *
+ *  The consent page is the only party that ever sees the person — the API is
+ *  handed an organization token and would otherwise learn nothing about them.
+ *  So the page asserts the identity here, and the API signs it into an
+ *  `id_token` the app can verify against the published JWKS. OIDC claim names,
+ *  because that is what an app already knows how to read. */
+export const AuthorizeUser = z
+	.object({
+		sub: z.string(),
+		email: z.string().nullish(),
+		email_verified: z.boolean().nullish(),
+		name: z.string().nullish(),
+		picture: z.string().nullish(),
+	})
+	.meta({ id: "AuthorizeUser" });
+
 /** Complete the delegated grant server-to-server. A `connector` request names
- *  the smith the end-user authorized; an `app` request carries nothing — the
- *  organization is the token's. */
+ *  the smith the end-user authorized; an `app` request carries the organization
+ *  implicitly (it is the token's) and `user` when `openid` was requested. */
 export const AuthorizeCompleteIn = z
-	.object({ smith_id: z.string().nullish() })
+	.object({
+		smith_id: z.string().nullish(),
+		user: AuthorizeUser.nullish(),
+	})
 	.meta({ id: "AuthorizeCompleteIn" });
 
 /** Where the tenant 302s the browser after completing or declining. */