@ingram-cloud/sdk 1.4.0 → 1.6.0

package/dist/zod/skills.js

@@ -0,0 +1,73 @@
+/**
+ * Agent Skills (#175) — a folder anchored by SKILL.md, per the Agent Skills
+ * specification, stored as an immutable version and attached to an agent.
+ *
+ * A version's bytes never appear on the wire: `files` lists each path with its
+ * size and content hash, so a tenant can see exactly what they installed.
+ */
+import { z } from "zod";
+/** One file in a skill version, as the caller uploaded it. */
+export const SkillFile = z
+    .object({
+    path: z.string(),
+    size: z.number().int(),
+    sha256: z.string(),
+    media_type: z.string(),
+})
+    .meta({ id: "SkillFile" });
+/** One published agent version that froze a reference to this skill version.
+ *  A frozen reference is the only kind that blocks a delete, so this is the
+ *  list a `409 skill_in_use` would name. */
+export const SkillReference = z
+    .object({ agent_id: z.string(), version: z.number().int() })
+    .meta({ id: "SkillReference" });
+/** An immutable published version of a skill. */
+export const SkillVersion = z
+    .object({
+    skill_id: z.string(),
+    version: z.number().int(),
+    description: z.string(),
+    license: z.string().nullable(),
+    compatibility: z.unknown().nullable(),
+    metadata: z.record(z.string(), z.unknown()).nullable(),
+    references: z.array(z.string()),
+    scripts: z.array(z.string()),
+    assets: z.array(z.string()),
+    files: z.array(SkillFile),
+    /** Published agent versions holding this one frozen. Always present, `[]`
+     *  when nothing does. */
+    referenced_by: z.array(SkillReference),
+    bytes: z.number().int(),
+    created_at: z.string(),
+})
+    .meta({ id: "SkillVersion" });
+/** The skill resource. `default_version` is what an agent gets when it names none. */
+export const Skill = z
+    .object({
+    id: z.string(),
+    object: z.literal("skill"),
+    name: z.string(),
+    description: z.string(),
+    default_version: z.number().int(),
+    created_at: z.string(),
+    updated_at: z.string(),
+})
+    .meta({ id: "Skill" });
+export const SkillListOut = z
+    .object({ object: z.literal("list"), data: z.array(Skill) })
+    .meta({ id: "SkillListOut" });
+export const SkillVersionListOut = z
+    .object({ object: z.literal("list"), data: z.array(SkillVersion) })
+    .meta({ id: "SkillVersionListOut" });
+/** Move the skill's `default_version` to an existing version. */
+export const SkillUpdateIn = z
+    .object({ default_version: z.number().int().positive() })
+    .meta({ id: "SkillUpdateIn" });
+/** One skill reference in an agent's `skills` config. Omitted `version` resolves
+ *  to the skill's `default_version` and is frozen at publish. */
+export const SkillRef = z
+    .object({
+    skill_id: z.string(),
+    version: z.number().int().positive().optional(),
+})
+    .meta({ id: "SkillRef" });

package/dist/zod/smith-revisions.js

@@ -16,6 +16,7 @@
  * `#/components/schemas/<id>` rather than inlining it.
  */
 import { z } from "zod";
+import { pageOut } from "./_page.js";
 /** An immutable snapshot of a smith's effective behaviour config at one revision. */
 export const SmithRevisionOut = z
     .object({
@@ -36,9 +37,7 @@ export const SmithRevisionOut = z
     created_at: z.string().nullish(),
 })
     .meta({ id: "SmithRevisionOut" });
-export const RevisionListOut = z
-    .object({ data: z.array(SmithRevisionOut) })
-    .meta({ id: "RevisionListOut" });
+export const RevisionListOut = pageOut(SmithRevisionOut, "RevisionListOut");
 // ── Request bodies ──────────────────────────────────────────────────────────
 export const RestoreIn = z
     .object({ note: z.string().nullish() })

package/dist/zod/smiths.js

@@ -17,6 +17,7 @@
  * `#/components/schemas/<id>` rather than inlining it.
  */
 import { z } from "zod";
+import { SkillRef } from "./skills.js";
 // ── Smith response ───────────────────────────────────────────────────────────
 export const SmithOut = z
     .object({
@@ -38,6 +39,7 @@ export const SmithOut = z
     vector_store_ids: z.array(z.string()).optional(),
     /** Registered MCP servers this smith's runs load, by name. Null = all. */
     mcp_servers: z.array(z.string()).nullish(),
+    skills: z.array(SkillRef).optional(),
     auto_memory: z.boolean().optional(),
     memory_consolidation: z.boolean().optional(),
     /** How the config resolved: by reference, with overrides, or embedded. */
@@ -58,6 +60,7 @@ export const SmithOut = z
         enabled_hosted_tools: z.array(z.string()),
         vector_store_ids: z.array(z.string()),
         mcp_servers: z.array(z.string()).nullable(),
+        skills: z.array(SkillRef),
         auto_memory: z.boolean().nullable(),
         memory_consolidation: z.boolean().nullable(),
     })
@@ -90,6 +93,7 @@ export const SmithCreate = z
     vector_store_ids: z.array(z.string()).nullish(),
     /** Scope this smith's runs to these registered MCP servers (by name). */
     mcp_servers: z.array(z.string()).nullish(),
+    skills: z.array(SkillRef).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
 })
@@ -110,6 +114,8 @@ export const SmithPatch = z
     /** Scope this smith's runs to these registered MCP servers (by name).
      *  Null clears the per-smith override (re-inherit the agent's value). */
     mcp_servers: z.array(z.string()).nullish(),
+    /** Null clears the per-smith override (re-inherit the agent's value). */
+    skills: z.array(SkillRef).nullish(),
     auto_memory: z.boolean().nullish(),
     memory_consolidation: z.boolean().nullish(),
 })

package/dist/zod/tenant.js

@@ -12,6 +12,7 @@
  * `#/components/schemas/<id>` rather than inlining it.
  */
 import { z } from "zod";
+import { Actor } from "./_actor.js";
 import { pageOut } from "./_page.js";
 // ── Events (poll mirror of the webhook firehose) ─────────────────────────────
 /** One event in the `/v1/events` feed — the `{v:1}` envelope (sans `tenant_id`,
@@ -24,6 +25,8 @@ export const EventOut = z
     type: z.string(),
     smith_id: z.string().nullable(),
     data: z.record(z.string(), z.unknown()),
+    /** Who acted. Null on events recorded before attribution shipped. */
+    actor: Actor.nullable(),
     created_at: z.string().nullable(),
 })
     .meta({ id: "EventOut" });
@@ -50,9 +53,7 @@ export const WebhookCreateOut = z
 })
     .meta({ id: "WebhookCreateOut" });
 /** The patch/delete-adjacent ack shape (just the id). */
-export const WebhookIdOut = z
-    .object({ id: z.string() })
-    .meta({ id: "WebhookIdOut" });
+export const WebhookIdOut = z.object({ id: z.string() }).meta({ id: "WebhookIdOut" });
 export const WebhookIn = z
     .object({
     url: z.string(),
@@ -142,7 +143,9 @@ export const TokenIn = z
     scope: z.string().default("smith"),
     smith_id: z.string().nullish(),
     permissions: z.array(z.string()).nullish(),
-    ttl_seconds: z.number().int().nullish(),
+    // Positive and bounded: `0` used to read as "no expiry" and mint a permanent
+    // admin token, and a ttl past year 275760 overflows the `Date` we serialize.
+    ttl_seconds: z.number().int().positive().max(315_360_000).nullish(),
     name: z.string().nullish(),
 })
     .meta({ id: "TokenIn" });
@@ -287,3 +290,20 @@ export const HostedToolOut = z
 export const HostedToolsListOut = z
     .object({ data: z.array(HostedToolOut) })
     .meta({ id: "HostedToolsListOut" });
+// ── Sandbox secrets (env a tenant's sandboxes carry) ─────────────────────────
+/** One secret by name. The value is NEVER echoed — only that it is set. */
+export const SandboxSecretOut = z
+    .object({
+    name: z.string(),
+    updated_at: z.string().nullable(),
+})
+    .meta({ id: "SandboxSecretOut" });
+export const SandboxSecretListOut = z
+    .object({ data: z.array(SandboxSecretOut) })
+    .meta({ id: "SandboxSecretListOut" });
+export const SandboxSecretIn = z
+    .object({ value: z.string() })
+    .meta({ id: "SandboxSecretIn" });
+export const SandboxSecretConfiguredOut = z
+    .object({ name: z.string(), configured: z.boolean() })
+    .meta({ id: "SandboxSecretConfiguredOut" });

package/dist/zod/vector-stores.js

@@ -16,6 +16,7 @@
  * rather than being accepted and ignored.
  */
 import { z } from "zod";
+import { oaiListOut } from "./_page.js";
 // ── Chunking ─────────────────────────────────────────────────────────────────
 /** Static chunking params. Overlap must not exceed half the chunk size. */
 export const StaticChunkingConfig = z
@@ -47,7 +48,9 @@ export const ChunkingStrategyOut = z
 /** File attributes: ≤16 keys, key ≤64 chars, value string(≤512)|number|bool. */
 export const VectorStoreAttributes = z
     .record(z.string().max(64), z.union([z.string().max(512), z.number(), z.boolean()]))
-    .refine((v) => Object.keys(v).length <= 16, { message: "at most 16 attribute keys" });
+    .refine((v) => Object.keys(v).length <= 16, {
+    message: "at most 16 attribute keys",
+});
 /** A filter node: a comparison (`type` eq/ne/gt/gte/lt/lte/in/nin over `key`/
  *  `value`) or a compound (`type` and/or over nested `filters`). The grammar is
  *  recursive; the schema validates one node and the API validates nested nodes
@@ -118,15 +121,7 @@ export const VectorStoreOut = z
 })
     .meta({ id: "VectorStoreOut" });
 /** Vector stores, in OpenAI's `list` envelope. */
-export const VectorStoreListOut = z
-    .object({
-    object: z.literal("list"),
-    data: z.array(VectorStoreOut),
-    first_id: z.string().nullable(),
-    last_id: z.string().nullable(),
-    has_more: z.boolean(),
-})
-    .meta({ id: "VectorStoreListOut" });
+export const VectorStoreListOut = oaiListOut(VectorStoreOut, "VectorStoreListOut");
 /** Modify body (OpenAI uses `POST`, not `PATCH`). */
 export const VectorStorePatch = z
     .object({
@@ -174,15 +169,7 @@ export const VectorStoreFileOut = z
     attributes: VectorStoreAttributes.nullable(),
 })
     .meta({ id: "VectorStoreFileOut" });
-export const VectorStoreFileListOut = z
-    .object({
-    object: z.literal("list"),
-    data: z.array(VectorStoreFileOut),
-    first_id: z.string().nullable(),
-    last_id: z.string().nullable(),
-    has_more: z.boolean(),
-})
-    .meta({ id: "VectorStoreFileListOut" });
+export const VectorStoreFileListOut = oaiListOut(VectorStoreFileOut, "VectorStoreFileListOut");
 /** Update body: attributes only (chunking is frozen once indexed). */
 export const VectorStoreFileUpdate = z
     .object({

package/package.json

@@ -1,26 +1,29 @@
 {
 	"name": "@ingram-cloud/sdk",
-	"version": "1.4.0",
+	"version": "1.6.0",
 	"description": "Typed wire contract + management-plane client for the Ingram Cloud API: Zod schemas to validate request/response bodies, TypeScript types for the JSON you read back, SSE/webhook event types, and a typed REST client.",
-	"license": "MIT",
-	"type": "module",
-	"homepage": "https://cloud.ingram.tech",
 	"keywords": [
-		"ingram-cloud",
+		"api",
 		"ingram",
+		"ingram-cloud",
+		"openapi",
 		"sdk",
-		"api",
 		"wire",
-		"zod",
-		"openapi"
+		"zod"
 	],
+	"homepage": "https://github.com/ingram-technologies/ingram-cloud-sdks/tree/main/packages/sdk#readme",
+	"bugs": "https://github.com/ingram-technologies/ingram-cloud-sdks/issues",
+	"license": "MIT",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/ingram-technologies/ingram-cloud-sdks.git",
+		"directory": "packages/sdk"
+	},
 	"files": [
 		"ts",
 		"dist"
 	],
-	"publishConfig": {
-		"access": "public"
-	},
+	"type": "module",
 	"exports": {
 		".": {
 			"types": "./ts/index.ts",
@@ -48,20 +51,24 @@
 			"default": "./dist/client.js"
 		}
 	},
+	"publishConfig": {
+		"access": "public"
+	},
 	"scripts": {
 		"build": "tsc -p tsconfig.build.json",
 		"typecheck": "tsc --noEmit",
 		"lint": "oxlint",
 		"format": "oxfmt --write .",
-		"prepublishOnly": "bun run build"
-	},
-	"devDependencies": {
-		"@ingram-tech/oxlint-config": "^0.2.2",
-		"oxfmt": "^0.58.0",
-		"oxlint": "^1.73.0",
-		"typescript": "^6"
+		"test": "vitest run",
+		"prepack": "bun run build"
 	},
 	"dependencies": {
 		"zod": "^4.4.3"
+	},
+	"devDependencies": {
+		"vitest": "^4.1.10"
+	},
+	"engines": {
+		"node": ">=20"
 	}
 }