@ingram-cloud/sdk 1.9.0 → 1.11.0

package/dist/client.js

@@ -354,7 +354,7 @@ export class IngramCloud {
             list: (aid, opts) => this.data("GET", `/agents/${enc(aid)}/ui`, opts),
             get: (aid, name, opts) => this.json("GET", `/agents/${enc(aid)}/ui/${enc(name)}`, opts),
             /** Upload/replace a template — `html` is the bundle, `meta` its
-             *  `{ name, csp?, permissions?, tool? }` sidecar. Replaces by name. */
+             *  `UiResourceIn` sidecar. Replaces by name. */
             put: (aid, html, meta, opts) => {
                 const form = new FormData();
                 form.append("file", html instanceof Blob

package/dist/zod/agents.js

@@ -23,8 +23,8 @@ export const AgentVariable = z
     required: z.boolean().optional(),
 })
     .meta({ id: "AgentVariable" });
-/** A predeclared UI-backed capability (Rung 2) bound to a UI template — the MCP
- *  host's model calls it as a typed tool and the template renders the result. */
+/** A typed app-tool bound to a UI template: the MCP host's model (or the
+ *  rendered panel) calls it and the template renders the result. */
 export const UiResourceTool = z
     .object({
     description: z.string(),
@@ -32,8 +32,12 @@ export const UiResourceTool = z
     input_schema: z.record(z.string(), z.unknown()).optional(),
     /** Scoped instruction the smith runs with when this tool is called. */
     instruction: z.string().nullish(),
-    /** Writes gate through approval; reads flow freely (OpenUI Query/Mutation). */
+    /** Writes gate through approval; reads flow freely. */
     mutating: z.boolean().optional(),
+    /** Who may call the tool — the MCP Apps `_meta.ui.visibility` list. Omitted
+     *  means both; `["app"]` hides it from the host's model so only the rendered
+     *  panel can call it (a refresh or a paginated read). */
+    visibility: z.array(z.enum(["model", "app"])).optional(),
 })
     .meta({ id: "UiResourceTool" });
 /** CSP domain allowlists for the sandboxed iframe — the MCP Apps `_meta.ui.csp`
@@ -46,19 +50,30 @@ export const UiCsp = z
     baseUriDomains: z.array(z.string()).optional(),
 })
     .meta({ id: "UiCsp" });
+/** The authored metadata of a UI template — one set of fields shared by the
+ *  upload sidecar and the stored resource. `csp`, `permissions`, `prefers_border`
+ *  and `domain` are the MCP Apps resource `_meta.ui`, echoed to the host verbatim. */
+const uiTemplateMeta = {
+    csp: UiCsp.nullish(),
+    /** Host permissions the template requests, a Permissions-Policy-style map
+     *  (e.g. `{ "camera": {}, "microphone": {} }`). */
+    permissions: z.record(z.string(), z.unknown()).nullish(),
+    /** Whether the host should draw its own border around the panel. Omitted
+     *  leaves it to the host (Claude: borderless on web, bordered on mobile). */
+    prefers_border: z.boolean().nullish(),
+    /** A stable sandbox origin for the panel, in the host's own format — needed
+     *  only when the panel runs its own OAuth flow or is CORS-allowlisted. */
+    domain: z.string().nullish(),
+    tool: UiResourceTool.nullish(),
+};
 /** A tenant-authored interactive UI template (MCP Apps, SEP-1865) attached to an
  *  agent. The HTML bundle lives in blob storage; this is its wire metadata (the
- *  internal blob ref is never exposed). `csp`/`permissions` mirror the standard
- *  `_meta.ui` shape and are echoed to the host on `resources/read`. */
+ *  internal blob ref is never exposed). */
 export const UiResource = z
     .object({
     name: z.string(),
     content_hash: z.string(),
-    csp: UiCsp.optional(),
-    /** Host permissions the template requests, a Permissions-Policy-style map
-     *  (e.g. `{ "camera": {}, "microphone": {} }`). */
-    permissions: z.record(z.string(), z.unknown()).optional(),
-    tool: UiResourceTool.nullish(),
+    ...uiTemplateMeta,
 })
     .meta({ id: "UiResource" });
 /** The mutable draft head — what the next publish snapshots. */
@@ -180,9 +195,7 @@ export const UiResourceIn = z
         .string()
         .regex(/^[a-z0-9][a-z0-9_-]*$/, "lowercase letters, digits, - and _")
         .max(63),
-    csp: UiCsp.nullish(),
-    permissions: z.record(z.string(), z.unknown()).nullish(),
-    tool: UiResourceTool.nullish(),
+    ...uiTemplateMeta,
 })
     .meta({ id: "UiResourceIn" });
 export const UiResourceListOut = z

package/dist/zod/tenant.js

@@ -194,11 +194,14 @@ export const ModelsListOut = z
     providers: z.array(ModelProviderOut),
 })
     .meta({ id: "ModelsListOut" });
-/** A BYOK model key — the `api_key` is NEVER echoed, only its presence. */
+/** A BYOK model key — the `api_key` is NEVER echoed, only its presence.
+ *  `workspace_id` is Anthropic's `anthropic-workspace-id`: required by an
+ *  identity-linked (multi-workspace) key, implicit in a workspace-scoped one. */
 export const ModelKeyOut = z
     .object({
     provider: z.string(),
     base_url: z.string().nullable(),
+    workspace_id: z.string().nullable(),
     has_key: z.boolean(),
     updated_at: z.string().nullable(),
 })
@@ -206,18 +209,21 @@ export const ModelKeyOut = z
 export const ModelKeyListOut = z
     .object({ data: z.array(ModelKeyOut) })
     .meta({ id: "ModelKeyListOut" });
-/** The PUT ack — never echoes the key, only presence + the (non-secret) base_url. */
+/** The PUT ack — never echoes the key, only presence + the non-secret
+ *  `base_url` / `workspace_id`. */
 export const ModelKeyConfiguredOut = z
     .object({
     provider: z.string(),
     configured: z.boolean(),
     base_url: z.string().nullable(),
+    workspace_id: z.string().nullable(),
 })
     .meta({ id: "ModelKeyConfiguredOut" });
 export const ModelKeyIn = z
     .object({
     api_key: z.string(),
     base_url: z.string().nullish(),
+    workspace_id: z.string().nullish(),
 })
     .meta({ id: "ModelKeyIn" });
 // ── Providers (tenant OAuth client credentials) ──────────────────────────────

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ingram-cloud/sdk",
-	"version": "1.9.0",
+	"version": "1.11.0",
 	"description": "Typed wire contract + management-plane client for the Ingram Cloud API: Zod schemas to validate request/response bodies, TypeScript types for the JSON you read back, SSE/webhook event types, and a typed REST client.",
 	"keywords": [
 		"api",
@@ -63,7 +63,7 @@
 		"prepack": "bun run build"
 	},
 	"dependencies": {
-		"zod": "^4.4.3"
+		"zod": "^4.5.4"
 	},
 	"devDependencies": {
 		"vitest": "^4.1.10"

package/ts/client.ts

@@ -832,7 +832,7 @@ export class IngramCloud {
 					opts,
 				),
 			/** Upload/replace a template — `html` is the bundle, `meta` its
-			 *  `{ name, csp?, permissions?, tool? }` sidecar. Replaces by name. */
+			 *  `UiResourceIn` sidecar. Replaces by name. */
 			put: (
 				aid: string,
 				html: string | Blob,

package/ts/zod/agents.ts

@@ -25,8 +25,8 @@ export const AgentVariable = z
 	})
 	.meta({ id: "AgentVariable" });
 
-/** A predeclared UI-backed capability (Rung 2) bound to a UI template — the MCP
- *  host's model calls it as a typed tool and the template renders the result. */
+/** A typed app-tool bound to a UI template: the MCP host's model (or the
+ *  rendered panel) calls it and the template renders the result. */
 export const UiResourceTool = z
 	.object({
 		description: z.string(),
@@ -34,8 +34,12 @@ export const UiResourceTool = z
 		input_schema: z.record(z.string(), z.unknown()).optional(),
 		/** Scoped instruction the smith runs with when this tool is called. */
 		instruction: z.string().nullish(),
-		/** Writes gate through approval; reads flow freely (OpenUI Query/Mutation). */
+		/** Writes gate through approval; reads flow freely. */
 		mutating: z.boolean().optional(),
+		/** Who may call the tool — the MCP Apps `_meta.ui.visibility` list. Omitted
+		 *  means both; `["app"]` hides it from the host's model so only the rendered
+		 *  panel can call it (a refresh or a paginated read). */
+		visibility: z.array(z.enum(["model", "app"])).optional(),
 	})
 	.meta({ id: "UiResourceTool" });
 
@@ -50,19 +54,31 @@ export const UiCsp = z
 	})
 	.meta({ id: "UiCsp" });
 
+/** The authored metadata of a UI template — one set of fields shared by the
+ *  upload sidecar and the stored resource. `csp`, `permissions`, `prefers_border`
+ *  and `domain` are the MCP Apps resource `_meta.ui`, echoed to the host verbatim. */
+const uiTemplateMeta = {
+	csp: UiCsp.nullish(),
+	/** Host permissions the template requests, a Permissions-Policy-style map
+	 *  (e.g. `{ "camera": {}, "microphone": {} }`). */
+	permissions: z.record(z.string(), z.unknown()).nullish(),
+	/** Whether the host should draw its own border around the panel. Omitted
+	 *  leaves it to the host (Claude: borderless on web, bordered on mobile). */
+	prefers_border: z.boolean().nullish(),
+	/** A stable sandbox origin for the panel, in the host's own format — needed
+	 *  only when the panel runs its own OAuth flow or is CORS-allowlisted. */
+	domain: z.string().nullish(),
+	tool: UiResourceTool.nullish(),
+};
+
 /** A tenant-authored interactive UI template (MCP Apps, SEP-1865) attached to an
  *  agent. The HTML bundle lives in blob storage; this is its wire metadata (the
- *  internal blob ref is never exposed). `csp`/`permissions` mirror the standard
- *  `_meta.ui` shape and are echoed to the host on `resources/read`. */
+ *  internal blob ref is never exposed). */
 export const UiResource = z
 	.object({
 		name: z.string(),
 		content_hash: z.string(),
-		csp: UiCsp.optional(),
-		/** Host permissions the template requests, a Permissions-Policy-style map
-		 *  (e.g. `{ "camera": {}, "microphone": {} }`). */
-		permissions: z.record(z.string(), z.unknown()).optional(),
-		tool: UiResourceTool.nullish(),
+		...uiTemplateMeta,
 	})
 	.meta({ id: "UiResource" });
 
@@ -197,9 +213,7 @@ export const UiResourceIn = z
 			.string()
 			.regex(/^[a-z0-9][a-z0-9_-]*$/, "lowercase letters, digits, - and _")
 			.max(63),
-		csp: UiCsp.nullish(),
-		permissions: z.record(z.string(), z.unknown()).nullish(),
-		tool: UiResourceTool.nullish(),
+		...uiTemplateMeta,
 	})
 	.meta({ id: "UiResourceIn" });
 

package/ts/zod/tenant.ts

@@ -226,11 +226,14 @@ export const ModelsListOut = z
 	})
 	.meta({ id: "ModelsListOut" });
 
-/** A BYOK model key — the `api_key` is NEVER echoed, only its presence. */
+/** A BYOK model key — the `api_key` is NEVER echoed, only its presence.
+ *  `workspace_id` is Anthropic's `anthropic-workspace-id`: required by an
+ *  identity-linked (multi-workspace) key, implicit in a workspace-scoped one. */
 export const ModelKeyOut = z
 	.object({
 		provider: z.string(),
 		base_url: z.string().nullable(),
+		workspace_id: z.string().nullable(),
 		has_key: z.boolean(),
 		updated_at: z.string().nullable(),
 	})
@@ -240,12 +243,14 @@ export const ModelKeyListOut = z
 	.object({ data: z.array(ModelKeyOut) })
 	.meta({ id: "ModelKeyListOut" });
 
-/** The PUT ack — never echoes the key, only presence + the (non-secret) base_url. */
+/** The PUT ack — never echoes the key, only presence + the non-secret
+ *  `base_url` / `workspace_id`. */
 export const ModelKeyConfiguredOut = z
 	.object({
 		provider: z.string(),
 		configured: z.boolean(),
 		base_url: z.string().nullable(),
+		workspace_id: z.string().nullable(),
 	})
 	.meta({ id: "ModelKeyConfiguredOut" });
 
@@ -253,6 +258,7 @@ export const ModelKeyIn = z
 	.object({
 		api_key: z.string(),
 		base_url: z.string().nullish(),
+		workspace_id: z.string().nullish(),
 	})
 	.meta({ id: "ModelKeyIn" });