@ingram-cloud/sdk 1.2.0 → 1.4.0

package/dist/client.js

@@ -143,6 +143,13 @@ export class IngramCloud {
                 body,
             }),
         },
+        /** End-user BYOK (#170): a smith's own provider keys, resolved ahead of the
+         *  tenant's so the end-user's provider account is billed. Never read back. */
+        modelKeys: {
+            list: (pid, opts) => this.data("GET", `/smiths/${enc(pid)}/model_keys`, opts),
+            put: (pid, provider, body, opts) => this.json("PUT", `/smiths/${enc(pid)}/model_keys/${enc(provider)}`, { ...opts, body }),
+            delete: (pid, provider, opts) => this.empty("DELETE", `/smiths/${enc(pid)}/model_keys/${enc(provider)}`, opts),
+        },
         schedules: {
             list: (pid, opts) => this.data("GET", `/smiths/${enc(pid)}/schedules`, opts),
             create: (pid, body, opts) => this.json("POST", `/smiths/${enc(pid)}/schedules`, {
@@ -246,6 +253,13 @@ export class IngramCloud {
                     rawBody: form,
                 });
             },
+            /** The template's HTML bundle — the same bytes the agent's MCP endpoint
+             *  serves, so a host can render a panel without vendoring a copy.
+             *  Tenant-authed: call it server-side and proxy to your chat UI. */
+            content: (aid, name, opts) => this.request("GET", `/agents/${enc(aid)}/ui/${enc(name)}/content`, {
+                ...opts,
+                headers: { accept: "text/html", ...opts?.headers },
+            }).then((r) => r.text()),
             delete: (aid, name, opts) => this.json("DELETE", `/agents/${enc(aid)}/ui/${enc(name)}`, opts),
         },
     };
@@ -384,6 +398,9 @@ export class IngramCloud {
                 body,
             }),
             delete: (wid, opts) => this.empty("DELETE", `/tenant/webhooks/${enc(wid)}`, opts),
+            /** Rotate the signing secret, returning the new one exactly once. Pass
+             *  `grace_seconds` to keep the old secret accepted during an overlap window. */
+            rotateSecret: (wid, body, opts) => this.json("POST", `/tenant/webhooks/${enc(wid)}/rotate_secret`, { ...opts, body: body ?? {} }),
             test: (wid, opts) => this.json("POST", `/tenant/webhooks/${enc(wid)}/test`, opts),
             /** The persisted delivery attempts for a webhook (durable retry audit trail). */
             deliveries: (wid, query, opts) => this.page(`/tenant/webhooks/${enc(wid)}/deliveries`, query, opts),
@@ -456,7 +473,8 @@ export class IngramCloud {
             decline: (requestId, opts) => this.json("POST", `/oauth/authorize-requests/${enc(requestId)}/decline`, opts),
         },
     };
-    // ── Organization (org token: projects + billing) ────────────────────────
+    // ── Organization (org token: projects + tokens) ─────────────────────────
+    // Note: the `/v1/organization/billing/*` surface is not yet wrapped here.
     organization = {
         projects: {
             list: (opts) => this.data("GET", "/organization/projects", opts),

package/dist/zod/agents.js

@@ -67,6 +67,8 @@ export const AgentDraft = z
     model: z.string().nullable(),
     enabled_hosted_tools: z.array(z.string()),
     vector_store_ids: z.array(z.string()),
+    /** Registered MCP servers this agent's smiths load, by name. Null = all. */
+    mcp_servers: z.array(z.string()).nullable(),
     auto_memory: z.boolean().nullable(),
     memory_consolidation: z.boolean().nullable(),
     variables: z.array(AgentVariable),
@@ -87,6 +89,8 @@ export const AgentOut = z
     rollout_version: z.number().int().nullable(),
     rollout_percent: z.number().int(),
     smith_count: z.number().int().optional(),
+    /** Newest run across every smith of this agent. Null until one runs. */
+    last_activity_at: z.string().nullable().optional(),
     created_at: z.string().nullable(),
     updated_at: z.string().nullable(),
 })
@@ -101,6 +105,7 @@ export const AgentVersionOut = z
         model: z.string().nullish(),
         enabled_hosted_tools: z.array(z.string()).optional(),
         vector_store_ids: z.array(z.string()).optional(),
+        mcp_servers: z.array(z.string()).nullish(),
         auto_memory: z.boolean().nullish(),
         memory_consolidation: z.boolean().nullish(),
         variables: z.array(AgentVariable).optional(),
@@ -123,6 +128,8 @@ export const AgentIn = z
     model: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope runs to these registered MCP servers (by name). Null/omitted = all. */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
     variables: z.array(AgentVariable).nullish(),
@@ -135,6 +142,9 @@ export const AgentPatch = z
     model: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope runs to these registered MCP servers (by name). An explicit null
+     *  clears the restriction (= all); omitted leaves it unchanged. */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
     variables: z.array(AgentVariable).nullish(),

package/dist/zod/mcp.js

@@ -67,11 +67,17 @@ export const McpServerOut = z
     approval_policy: z.array(ApprovalRule).optional(),
     tools: z.array(McpTool),
     tools_refreshed_at: z.string().nullable(),
-    /** `degraded` when the edge failed discovery or its secret can't be decoded
-     *  at run time; otherwise the stored lifecycle status. */
+    /** `degraded` when the edge failed discovery, its secret can't be decoded at
+     *  run time, or its last `tools/call` failed at the transport level;
+     *  otherwise the stored lifecycle status. */
     status: z.string(),
-    /** Last discovery/runtime-load failure, or null when the edge is healthy. */
+    /** Last discovery/runtime-load failure, or null when discovery is healthy. */
     discovery_error: z.string().nullable(),
+    /** Last transport-level `tools/call` failure (network / HTTP status), or
+     *  null. Discovery can succeed while calls fail — this catches that. Cleared
+     *  by a successful call or a re-PUT. */
+    last_call_error: z.string().nullable(),
+    last_call_error_at: z.string().nullable(),
     created_at: z.string().nullable(),
 })
     .meta({ id: "McpServerOut" });
@@ -95,7 +101,9 @@ export const McpAuthIn = z
 })
     .meta({ id: "McpAuthIn" });
 /** Register or replace a server: supply a raw `url` + `auth`, or a `catalog`
- *  slug (catalog defaults are stamped down, body fields override). */
+ *  slug (catalog defaults are stamped down, body fields override). PUT is a
+ *  full replace and `auth.kind` is required unless a catalog preset supplies
+ *  it — there is no implicit `none`. */
 export const McpServerIn = z
     .object({
     url: z.string().nullish(),

package/dist/zod/observability.js

@@ -63,6 +63,7 @@ export const TraceOut = z
     id: z.string(),
     smith_id: z.string(),
     app_id: z.string().nullable(),
+    run_id: z.string().nullable(),
     root_kind: ICSpanKindEnum,
     name: z.string(),
     status: z.string(),

package/dist/zod/smith-revisions.js

@@ -25,8 +25,11 @@ export const SmithRevisionOut = z
         model: z.string().nullish(),
         enabled_hosted_tools: z.array(z.string()).optional(),
         vector_store_ids: z.array(z.string()).optional(),
-        auto_memory: z.boolean().optional(),
-        memory_consolidation: z.boolean().optional(),
+        mcp_servers: z.array(z.string()).nullish(),
+        // Nullish: a snapshot taken while the smith inherited a sparse agent
+        // version carries null (= the default) for these.
+        auto_memory: z.boolean().nullish(),
+        memory_consolidation: z.boolean().nullish(),
     }),
     created_by: z.string().nullish(),
     note: z.string().nullish(),

package/dist/zod/smiths.js

@@ -36,6 +36,8 @@ export const SmithOut = z
     rendered_instructions: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).optional(),
     vector_store_ids: z.array(z.string()).optional(),
+    /** Registered MCP servers this smith's runs load, by name. Null = all. */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().optional(),
     memory_consolidation: z.boolean().optional(),
     /** How the config resolved: by reference, with overrides, or embedded. */
@@ -55,6 +57,7 @@ export const SmithOut = z
         instructions: z.string().nullable(),
         enabled_hosted_tools: z.array(z.string()),
         vector_store_ids: z.array(z.string()),
+        mcp_servers: z.array(z.string()).nullable(),
         auto_memory: z.boolean().nullable(),
         memory_consolidation: z.boolean().nullable(),
     })
@@ -85,6 +88,8 @@ export const SmithCreate = z
     instructions: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope this smith's runs to these registered MCP servers (by name). */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
 })
@@ -102,6 +107,9 @@ export const SmithPatch = z
     instructions: z.string().nullish(),
     enabled_hosted_tools: z.array(z.string()).nullish(),
     vector_store_ids: z.array(z.string()).nullish(),
+    /** Scope this smith's runs to these registered MCP servers (by name).
+     *  Null clears the per-smith override (re-inherit the agent's value). */
+    mcp_servers: z.array(z.string()).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
 })

package/dist/zod/tenant.js

@@ -67,6 +67,23 @@ export const WebhookPatch = z
     active: z.boolean().nullish(),
 })
     .meta({ id: "WebhookPatch" });
+/** Rotate a webhook's signing secret. `grace_seconds` keeps the outgoing secret
+ *  valid for an overlap window (default 24h, 0 = cut over immediately, max 7d);
+ *  during it every delivery is signed with both the new and old secret. */
+export const WebhookRotateIn = z
+    .object({
+    grace_seconds: z.number().int().min(0).max(604800).default(86400),
+})
+    .meta({ id: "WebhookRotateIn" });
+/** The rotate response — the new signing `secret` is returned EXACTLY ONCE, here.
+ *  `previous_secret_expires_at` is when the old secret stops being accepted. */
+export const WebhookRotateOut = z
+    .object({
+    id: z.string(),
+    secret: z.string(),
+    previous_secret_expires_at: z.string().nullable(),
+})
+    .meta({ id: "WebhookRotateOut" });
 /** One persisted delivery attempt record for a webhook — the audit trail behind
  *  durable, retried delivery. `status` is `pending` | `succeeded` | `dead`. */
 export const WebhookDeliveryOut = z

package/dist/zod/vector-stores.js

@@ -7,9 +7,11 @@
  * filter grammar, and the `search_results.page` envelope are OpenAI's, wart for
  * wart (modify is `POST`, the batch object is `vector_store.files_batch`, the
  * search page uses a `next_page` token while CRUD lists use `first_id`/
- * `last_id`). `smith_id` is the one documented IC extension: it scopes a store
- * to a single smith ("" = tenant-wide), the same isolation boundary every other
- * smith-owned resource has. Expiration policies (`expires_after`), query
+ * `last_id`). Two documented IC extensions: `smith_id` scopes a store to a
+ * single smith ("" = tenant-wide), the same isolation boundary every other
+ * smith-owned resource has; `embedding_model` names the store's embedder,
+ * frozen at create (OpenAI pins one platform-wide, Gemini's File Search exposes
+ * it the same way). Expiration policies (`expires_after`), query
  * rewriting, and rankers are not implemented — the fields don't exist here
  * rather than being accepted and ignored.
  */
@@ -78,6 +80,11 @@ export const VectorStoreIn = z
     metadata: z.record(z.string(), z.unknown()).optional(),
     /** IC extension: own the store to one smith ("" / omitted = tenant-wide). */
     smith_id: z.string().optional(),
+    /** IC extension: the embedder to index and query this store with, frozen at
+     *  create (omitted = the platform default). Any model your OpenAI-provider
+     *  key can reach — including an EU-hosted OpenAI-compatible endpoint set as
+     *  that key's `base_url` — of at most 1536 dimensions. */
+    embedding_model: z.string().optional(),
 })
     .meta({ id: "VectorStoreIn" });
 export const VectorStoreFileCounts = z.object({
@@ -105,6 +112,9 @@ export const VectorStoreOut = z
     metadata: z.record(z.string(), z.unknown()),
     /** IC extension: the owning smith ("" = tenant-wide). */
     smith_id: z.string(),
+    /** IC extension: the embedder this store is indexed and queried with,
+     *  frozen at create. */
+    embedding_model: z.string(),
 })
     .meta({ id: "VectorStoreOut" });
 /** Vector stores, in OpenAI's `list` envelope. */
@@ -151,7 +161,12 @@ export const VectorStoreFileOut = z
     status: z.enum(["in_progress", "completed", "failed", "cancelled"]),
     last_error: z
         .object({
-        code: z.enum(["server_error", "unsupported_file", "invalid_file"]),
+        code: z.enum([
+            "server_error",
+            "unsupported_file",
+            "no_text_layer",
+            "invalid_file",
+        ]),
         message: z.string(),
     })
         .nullable(),
@@ -174,6 +189,17 @@ export const VectorStoreFileUpdate = z
     attributes: VectorStoreAttributes.nullable(),
 })
     .meta({ id: "VectorStoreFileUpdate" });
+/** The parsed text a file was indexed as, chunk by chunk, in OpenAI's
+ *  `vector_store.file_content.page` envelope. The whole file is one page — the
+ *  paging fields are the envelope's shape, not a promise of more. */
+export const VectorStoreFileContentOut = z
+    .object({
+    object: z.literal("vector_store.file_content.page"),
+    data: z.array(z.object({ type: z.literal("text"), text: z.string() })),
+    has_more: z.literal(false),
+    next_page: z.null(),
+})
+    .meta({ id: "VectorStoreFileContentOut" });
 export const VectorStoreFileDeleted = z
     .object({
     id: z.string(),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-cloud/sdk",
-	"version": "1.2.0",
+	"version": "1.4.0",
 	"description": "Typed wire contract + management-plane client for the Ingram Cloud API: Zod schemas to validate request/response bodies, TypeScript types for the JSON you read back, SSE/webhook event types, and a typed REST client.",
 	"license": "MIT",
 	"type": "module",

package/ts/client.ts

@@ -125,6 +125,8 @@ import type {
 	WebhookIn,
 	WebhookPatch,
 	WebhookRedeliverOut,
+	WebhookRotateIn,
+	WebhookRotateOut,
 } from "./zod/tenant.js";
 import type { WhatsAppConfigIn } from "./zod/whatsapp.js";
 
@@ -451,6 +453,30 @@ export class IngramCloud {
 				),
 		},
 
+		/** End-user BYOK (#170): a smith's own provider keys, resolved ahead of the
+		 *  tenant's so the end-user's provider account is billed. Never read back. */
+		modelKeys: {
+			list: (pid: string, opts?: RequestOptions) =>
+				this.data<ICModelKey>("GET", `/smiths/${enc(pid)}/model_keys`, opts),
+			put: (
+				pid: string,
+				provider: string,
+				body: z.input<typeof ModelKeyIn>,
+				opts?: RequestOptions,
+			) =>
+				this.json<z.infer<typeof ModelKeyConfiguredOut>>(
+					"PUT",
+					`/smiths/${enc(pid)}/model_keys/${enc(provider)}`,
+					{ ...opts, body },
+				),
+			delete: (pid: string, provider: string, opts?: RequestOptions) =>
+				this.empty(
+					"DELETE",
+					`/smiths/${enc(pid)}/model_keys/${enc(provider)}`,
+					opts,
+				),
+		},
+
 		schedules: {
 			list: (pid: string, opts?: RequestOptions) =>
 				this.data<ICSchedule>("GET", `/smiths/${enc(pid)}/schedules`, opts),
@@ -659,6 +685,14 @@ export class IngramCloud {
 					rawBody: form,
 				});
 			},
+			/** The template's HTML bundle — the same bytes the agent's MCP endpoint
+			 *  serves, so a host can render a panel without vendoring a copy.
+			 *  Tenant-authed: call it server-side and proxy to your chat UI. */
+			content: (aid: string, name: string, opts?: RequestOptions) =>
+				this.request("GET", `/agents/${enc(aid)}/ui/${enc(name)}/content`, {
+					...opts,
+					headers: { accept: "text/html", ...opts?.headers },
+				}).then((r) => r.text()),
 			delete: (aid: string, name: string, opts?: RequestOptions) =>
 				this.json<{ name: string; deleted: boolean }>(
 					"DELETE",
@@ -1034,6 +1068,18 @@ export class IngramCloud {
 				}),
 			delete: (wid: string, opts?: RequestOptions) =>
 				this.empty("DELETE", `/tenant/webhooks/${enc(wid)}`, opts),
+			/** Rotate the signing secret, returning the new one exactly once. Pass
+			 *  `grace_seconds` to keep the old secret accepted during an overlap window. */
+			rotateSecret: (
+				wid: string,
+				body?: z.input<typeof WebhookRotateIn>,
+				opts?: RequestOptions,
+			) =>
+				this.json<z.infer<typeof WebhookRotateOut>>(
+					"POST",
+					`/tenant/webhooks/${enc(wid)}/rotate_secret`,
+					{ ...opts, body: body ?? {} },
+				),
 			test: (wid: string, opts?: RequestOptions) =>
 				this.json<{ delivered: boolean }>(
 					"POST",
@@ -1210,7 +1256,8 @@ export class IngramCloud {
 		},
 	};
 
-	// ── Organization (org token: projects + billing) ────────────────────────
+	// ── Organization (org token: projects + tokens) ─────────────────────────
+	// Note: the `/v1/organization/billing/*` surface is not yet wrapped here.
 
 	readonly organization = {
 		projects: {

package/ts/zod/agents.ts

@@ -72,6 +72,8 @@ export const AgentDraft = z
 		model: z.string().nullable(),
 		enabled_hosted_tools: z.array(z.string()),
 		vector_store_ids: z.array(z.string()),
+		/** Registered MCP servers this agent's smiths load, by name. Null = all. */
+		mcp_servers: z.array(z.string()).nullable(),
 		auto_memory: z.boolean().nullable(),
 		memory_consolidation: z.boolean().nullable(),
 		variables: z.array(AgentVariable),
@@ -93,6 +95,8 @@ export const AgentOut = z
 		rollout_version: z.number().int().nullable(),
 		rollout_percent: z.number().int(),
 		smith_count: z.number().int().optional(),
+		/** Newest run across every smith of this agent. Null until one runs. */
+		last_activity_at: z.string().nullable().optional(),
 		created_at: z.string().nullable(),
 		updated_at: z.string().nullable(),
 	})
@@ -109,6 +113,7 @@ export const AgentVersionOut = z
 			model: z.string().nullish(),
 			enabled_hosted_tools: z.array(z.string()).optional(),
 			vector_store_ids: z.array(z.string()).optional(),
+			mcp_servers: z.array(z.string()).nullish(),
 			auto_memory: z.boolean().nullish(),
 			memory_consolidation: z.boolean().nullish(),
 			variables: z.array(AgentVariable).optional(),
@@ -134,6 +139,8 @@ export const AgentIn = z
 		model: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope runs to these registered MCP servers (by name). Null/omitted = all. */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 		variables: z.array(AgentVariable).nullish(),
@@ -147,6 +154,9 @@ export const AgentPatch = z
 		model: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope runs to these registered MCP servers (by name). An explicit null
+		 *  clears the restriction (= all); omitted leaves it unchanged. */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 		variables: z.array(AgentVariable).nullish(),

package/ts/zod/mcp.ts

@@ -72,11 +72,17 @@ export const McpServerOut = z
 		approval_policy: z.array(ApprovalRule).optional(),
 		tools: z.array(McpTool),
 		tools_refreshed_at: z.string().nullable(),
-		/** `degraded` when the edge failed discovery or its secret can't be decoded
-		 *  at run time; otherwise the stored lifecycle status. */
+		/** `degraded` when the edge failed discovery, its secret can't be decoded at
+		 *  run time, or its last `tools/call` failed at the transport level;
+		 *  otherwise the stored lifecycle status. */
 		status: z.string(),
-		/** Last discovery/runtime-load failure, or null when the edge is healthy. */
+		/** Last discovery/runtime-load failure, or null when discovery is healthy. */
 		discovery_error: z.string().nullable(),
+		/** Last transport-level `tools/call` failure (network / HTTP status), or
+		 *  null. Discovery can succeed while calls fail — this catches that. Cleared
+		 *  by a successful call or a re-PUT. */
+		last_call_error: z.string().nullable(),
+		last_call_error_at: z.string().nullable(),
 		created_at: z.string().nullable(),
 	})
 	.meta({ id: "McpServerOut" });
@@ -105,7 +111,9 @@ export const McpAuthIn = z
 	.meta({ id: "McpAuthIn" });
 
 /** Register or replace a server: supply a raw `url` + `auth`, or a `catalog`
- *  slug (catalog defaults are stamped down, body fields override). */
+ *  slug (catalog defaults are stamped down, body fields override). PUT is a
+ *  full replace and `auth.kind` is required unless a catalog preset supplies
+ *  it — there is no implicit `none`. */
 export const McpServerIn = z
 	.object({
 		url: z.string().nullish(),

package/ts/zod/observability.ts

@@ -67,6 +67,7 @@ export const TraceOut = z
 		id: z.string(),
 		smith_id: z.string(),
 		app_id: z.string().nullable(),
+		run_id: z.string().nullable(),
 		root_kind: ICSpanKindEnum,
 		name: z.string(),
 		status: z.string(),

package/ts/zod/smith-revisions.ts

@@ -26,8 +26,11 @@ export const SmithRevisionOut = z
 			model: z.string().nullish(),
 			enabled_hosted_tools: z.array(z.string()).optional(),
 			vector_store_ids: z.array(z.string()).optional(),
-			auto_memory: z.boolean().optional(),
-			memory_consolidation: z.boolean().optional(),
+			mcp_servers: z.array(z.string()).nullish(),
+			// Nullish: a snapshot taken while the smith inherited a sparse agent
+			// version carries null (= the default) for these.
+			auto_memory: z.boolean().nullish(),
+			memory_consolidation: z.boolean().nullish(),
 		}),
 		created_by: z.string().nullish(),
 		note: z.string().nullish(),

package/ts/zod/smiths.ts

@@ -38,6 +38,8 @@ export const SmithOut = z
 		rendered_instructions: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).optional(),
 		vector_store_ids: z.array(z.string()).optional(),
+		/** Registered MCP servers this smith's runs load, by name. Null = all. */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().optional(),
 		memory_consolidation: z.boolean().optional(),
 		/** How the config resolved: by reference, with overrides, or embedded. */
@@ -57,6 +59,7 @@ export const SmithOut = z
 				instructions: z.string().nullable(),
 				enabled_hosted_tools: z.array(z.string()),
 				vector_store_ids: z.array(z.string()),
+				mcp_servers: z.array(z.string()).nullable(),
 				auto_memory: z.boolean().nullable(),
 				memory_consolidation: z.boolean().nullable(),
 			})
@@ -90,6 +93,8 @@ export const SmithCreate = z
 		instructions: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope this smith's runs to these registered MCP servers (by name). */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 	})
@@ -108,6 +113,9 @@ export const SmithPatch = z
 		instructions: z.string().nullish(),
 		enabled_hosted_tools: z.array(z.string()).nullish(),
 		vector_store_ids: z.array(z.string()).nullish(),
+		/** Scope this smith's runs to these registered MCP servers (by name).
+		 *  Null clears the per-smith override (re-inherit the agent's value). */
+		mcp_servers: z.array(z.string()).nullish(),
 		auto_memory: z.boolean().nullish(),
 		memory_consolidation: z.boolean().nullish(),
 	})

package/ts/zod/tenant.ts

@@ -78,6 +78,25 @@ export const WebhookPatch = z
 	})
 	.meta({ id: "WebhookPatch" });
 
+/** Rotate a webhook's signing secret. `grace_seconds` keeps the outgoing secret
+ *  valid for an overlap window (default 24h, 0 = cut over immediately, max 7d);
+ *  during it every delivery is signed with both the new and old secret. */
+export const WebhookRotateIn = z
+	.object({
+		grace_seconds: z.number().int().min(0).max(604800).default(86400),
+	})
+	.meta({ id: "WebhookRotateIn" });
+
+/** The rotate response — the new signing `secret` is returned EXACTLY ONCE, here.
+ *  `previous_secret_expires_at` is when the old secret stops being accepted. */
+export const WebhookRotateOut = z
+	.object({
+		id: z.string(),
+		secret: z.string(),
+		previous_secret_expires_at: z.string().nullable(),
+	})
+	.meta({ id: "WebhookRotateOut" });
+
 /** One persisted delivery attempt record for a webhook — the audit trail behind
  *  durable, retried delivery. `status` is `pending` | `succeeded` | `dead`. */
 export const WebhookDeliveryOut = z

package/ts/zod/vector-stores.ts

@@ -7,9 +7,11 @@
  * filter grammar, and the `search_results.page` envelope are OpenAI's, wart for
  * wart (modify is `POST`, the batch object is `vector_store.files_batch`, the
  * search page uses a `next_page` token while CRUD lists use `first_id`/
- * `last_id`). `smith_id` is the one documented IC extension: it scopes a store
- * to a single smith ("" = tenant-wide), the same isolation boundary every other
- * smith-owned resource has. Expiration policies (`expires_after`), query
+ * `last_id`). Two documented IC extensions: `smith_id` scopes a store to a
+ * single smith ("" = tenant-wide), the same isolation boundary every other
+ * smith-owned resource has; `embedding_model` names the store's embedder,
+ * frozen at create (OpenAI pins one platform-wide, Gemini's File Search exposes
+ * it the same way). Expiration policies (`expires_after`), query
  * rewriting, and rankers are not implemented — the fields don't exist here
  * rather than being accepted and ignored.
  */
@@ -95,6 +97,11 @@ export const VectorStoreIn = z
 		metadata: z.record(z.string(), z.unknown()).optional(),
 		/** IC extension: own the store to one smith ("" / omitted = tenant-wide). */
 		smith_id: z.string().optional(),
+		/** IC extension: the embedder to index and query this store with, frozen at
+		 *  create (omitted = the platform default). Any model your OpenAI-provider
+		 *  key can reach — including an EU-hosted OpenAI-compatible endpoint set as
+		 *  that key's `base_url` — of at most 1536 dimensions. */
+		embedding_model: z.string().optional(),
 	})
 	.meta({ id: "VectorStoreIn" });
 
@@ -124,6 +131,9 @@ export const VectorStoreOut = z
 		metadata: z.record(z.string(), z.unknown()),
 		/** IC extension: the owning smith ("" = tenant-wide). */
 		smith_id: z.string(),
+		/** IC extension: the embedder this store is indexed and queried with,
+		 *  frozen at create. */
+		embedding_model: z.string(),
 	})
 	.meta({ id: "VectorStoreOut" });
 
@@ -176,7 +186,12 @@ export const VectorStoreFileOut = z
 		status: z.enum(["in_progress", "completed", "failed", "cancelled"]),
 		last_error: z
 			.object({
-				code: z.enum(["server_error", "unsupported_file", "invalid_file"]),
+				code: z.enum([
+					"server_error",
+					"unsupported_file",
+					"no_text_layer",
+					"invalid_file",
+				]),
 				message: z.string(),
 			})
 			.nullable(),
@@ -202,6 +217,18 @@ export const VectorStoreFileUpdate = z
 	})
 	.meta({ id: "VectorStoreFileUpdate" });
 
+/** The parsed text a file was indexed as, chunk by chunk, in OpenAI's
+ *  `vector_store.file_content.page` envelope. The whole file is one page — the
+ *  paging fields are the envelope's shape, not a promise of more. */
+export const VectorStoreFileContentOut = z
+	.object({
+		object: z.literal("vector_store.file_content.page"),
+		data: z.array(z.object({ type: z.literal("text"), text: z.string() })),
+		has_more: z.literal(false),
+		next_page: z.null(),
+	})
+	.meta({ id: "VectorStoreFileContentOut" });
+
 export const VectorStoreFileDeleted = z
 	.object({
 		id: z.string(),
@@ -291,6 +318,7 @@ export const VectorStoreSearchOut = z
 
 export type ICVectorStore = z.infer<typeof VectorStoreOut>;
 export type ICVectorStoreFile = z.infer<typeof VectorStoreFileOut>;
+export type ICVectorStoreFileContentPage = z.infer<typeof VectorStoreFileContentOut>;
 export type ICVectorStoreFileBatch = z.infer<typeof VectorStoreFileBatchOut>;
 export type ICVectorStoreSearchPage = z.infer<typeof VectorStoreSearchOut>;
 export type ICVectorStoreAttributes = z.infer<typeof VectorStoreAttributes>;