@m8tes/sdk 0.1.0-alpha.2 → 0.1.0-alpha.3

package/dist/index.d.cts

@@ -91,14 +91,17 @@ declare function createHttp(options?: ClientOptions): Http;
 interface ListResponse<T> {
     data: T[];
     hasMore: boolean;
+    /** Cursor for `?starting_after=` when `hasMore` is true; mirrors the Python SDK. */
+    nextStartingAfter?: string | number | null;
 }
 /** A page of results. `for await (const item of page)` walks ALL pages. */
 declare class Page<T> implements ListResponse<T>, AsyncIterable<T> {
     readonly data: T[];
     readonly hasMore: boolean;
+    readonly nextStartingAfter?: string | number | null;
     /** Fetches the next page given a cursor. Absent on a terminal page. */
     private readonly fetchNext?;
-    constructor(data: T[], hasMore: boolean, fetchNext?: (startingAfter: string | number) => Promise<Page<T>>);
+    constructor(data: T[], hasMore: boolean, fetchNext?: (startingAfter: string | number) => Promise<Page<T>>, nextStartingAfter?: string | number | null);
     /**
      * Auto-paging: yields every item across every page.
      *
@@ -228,6 +231,10 @@ interface PermissionRequest {
     created_at: string;
     resolved_at: string | null;
     auto_resolved?: boolean;
+    /** False when the runtime would ignore an "always allow" for this tool. */
+    can_remember?: boolean;
+    /** False when the Always-allow control must start unticked (force-ask floor). */
+    remember_default?: boolean;
 }
 interface Task {
     id: number;
@@ -429,6 +436,8 @@ interface PermissionPolicy {
     user_id: string;
     tool_name: string;
     created_at: string;
+    /** Which surface minted the grant ("run_approval" / "api"); null on legacy rows. */
+    source?: string | null;
 }
 /**
  * Billing usage and limits for the current period.
@@ -452,6 +461,8 @@ interface Usage {
     overage_cap_cents: number;
     overage_rate_cents: number;
     trial_ends_at?: string | null;
+    /** True when the account bypasses the included-runs meter (admin/unlimited). */
+    unlimited_runs?: boolean;
 }
 /** Token + USD totals over a usage-timeseries window. `cost_usd` is a string. */
 interface UsageTotals {
@@ -1104,6 +1115,11 @@ interface PollOptions {
     timeout?: number;
     /** Abort the wait early. The in-flight request is cancelled with it. */
     signal?: AbortSignal;
+    /**
+     * End-user scope for each `GET /runs/{id}` poll. Required when the account
+     * has strict multi-tenant mode on — without it every poll 422s.
+     */
+    user_id?: string;
 }
 interface WaitOptions extends PollOptions {
     /**
@@ -1329,8 +1345,13 @@ interface ApproveParams {
     request_id: string;
     decision: "allow" | "deny";
     /**
-     * Apply the same decision to matching tool requests for the rest of THIS run.
-     * For a policy that outlives the run, use the permissions API instead.
+     * Persist beyond this single gate.
+     * - `false` (default): this request only.
+     * - `true` + allow: also silence matching tools for the rest of THIS run AND
+     *   store a cross-run always-allow policy (scoped to the run's end-user when
+     *   set; revoke via `/permissions`).
+     * - `true` + deny: deny matching tools for the rest of THIS run only (no
+     *   stored policy).
      */
     remember?: boolean;
 }
@@ -1371,12 +1392,17 @@ interface RunsResource {
     stream(runId: number, options?: RunStreamOptions): RunStream;
     /** Continue the conversation on an existing run, streaming the reply. */
     reply(runId: number, message: string, options?: RunStreamOptions): RunStream;
-    /** GET /runs/{id} takes NO query params — it is already account-scoped, and
-     *  sending `user_id` returns 422 `unknown_query_parameter`. */
-    get(runId: number): Promise<Run>;
+    /** GET /runs/{id}. Pass `user_id` to scope to one end-user (required when the
+     *  account has strict multi-tenant mode on). */
+    get(runId: number, params?: {
+        user_id?: string;
+    }): Promise<Run>;
     list(params?: RunListParams): Promise<Page<Run>>;
-    /** Cancel a running run. Returns the updated Run, like the Python SDK. */
-    cancel(runId: number): Promise<Run>;
+    /** Cancel a running run. Returns the updated Run, like the Python SDK.
+     *  Pass `user_id` when the account has strict multi-tenant mode on. */
+    cancel(runId: number, params?: {
+        user_id?: string;
+    }): Promise<Run>;
     /** Approve or deny a pending tool-permission gate. */
     approve(runId: number, params: ApproveParams): Promise<PermissionRequest>;
     /** Answer a pending AskUserQuestion gate, resuming the run. */
@@ -1672,7 +1698,7 @@ interface WebhooksResource {
  */
 
 /** Kept in lockstep with package.json "version" — guarded by test/version.test.ts. */
-declare const M8TES_SDK_VERSION = "0.1.0-alpha.2";
+declare const M8TES_SDK_VERSION = "0.1.0-alpha.3";
 declare class M8tes {
     readonly runs: RunsResource;
     readonly agents: AgentsResource;

package/dist/index.d.ts

@@ -91,14 +91,17 @@ declare function createHttp(options?: ClientOptions): Http;
 interface ListResponse<T> {
     data: T[];
     hasMore: boolean;
+    /** Cursor for `?starting_after=` when `hasMore` is true; mirrors the Python SDK. */
+    nextStartingAfter?: string | number | null;
 }
 /** A page of results. `for await (const item of page)` walks ALL pages. */
 declare class Page<T> implements ListResponse<T>, AsyncIterable<T> {
     readonly data: T[];
     readonly hasMore: boolean;
+    readonly nextStartingAfter?: string | number | null;
     /** Fetches the next page given a cursor. Absent on a terminal page. */
     private readonly fetchNext?;
-    constructor(data: T[], hasMore: boolean, fetchNext?: (startingAfter: string | number) => Promise<Page<T>>);
+    constructor(data: T[], hasMore: boolean, fetchNext?: (startingAfter: string | number) => Promise<Page<T>>, nextStartingAfter?: string | number | null);
     /**
      * Auto-paging: yields every item across every page.
      *
@@ -228,6 +231,10 @@ interface PermissionRequest {
     created_at: string;
     resolved_at: string | null;
     auto_resolved?: boolean;
+    /** False when the runtime would ignore an "always allow" for this tool. */
+    can_remember?: boolean;
+    /** False when the Always-allow control must start unticked (force-ask floor). */
+    remember_default?: boolean;
 }
 interface Task {
     id: number;
@@ -429,6 +436,8 @@ interface PermissionPolicy {
     user_id: string;
     tool_name: string;
     created_at: string;
+    /** Which surface minted the grant ("run_approval" / "api"); null on legacy rows. */
+    source?: string | null;
 }
 /**
  * Billing usage and limits for the current period.
@@ -452,6 +461,8 @@ interface Usage {
     overage_cap_cents: number;
     overage_rate_cents: number;
     trial_ends_at?: string | null;
+    /** True when the account bypasses the included-runs meter (admin/unlimited). */
+    unlimited_runs?: boolean;
 }
 /** Token + USD totals over a usage-timeseries window. `cost_usd` is a string. */
 interface UsageTotals {
@@ -1104,6 +1115,11 @@ interface PollOptions {
     timeout?: number;
     /** Abort the wait early. The in-flight request is cancelled with it. */
     signal?: AbortSignal;
+    /**
+     * End-user scope for each `GET /runs/{id}` poll. Required when the account
+     * has strict multi-tenant mode on — without it every poll 422s.
+     */
+    user_id?: string;
 }
 interface WaitOptions extends PollOptions {
     /**
@@ -1329,8 +1345,13 @@ interface ApproveParams {
     request_id: string;
     decision: "allow" | "deny";
     /**
-     * Apply the same decision to matching tool requests for the rest of THIS run.
-     * For a policy that outlives the run, use the permissions API instead.
+     * Persist beyond this single gate.
+     * - `false` (default): this request only.
+     * - `true` + allow: also silence matching tools for the rest of THIS run AND
+     *   store a cross-run always-allow policy (scoped to the run's end-user when
+     *   set; revoke via `/permissions`).
+     * - `true` + deny: deny matching tools for the rest of THIS run only (no
+     *   stored policy).
      */
     remember?: boolean;
 }
@@ -1371,12 +1392,17 @@ interface RunsResource {
     stream(runId: number, options?: RunStreamOptions): RunStream;
     /** Continue the conversation on an existing run, streaming the reply. */
     reply(runId: number, message: string, options?: RunStreamOptions): RunStream;
-    /** GET /runs/{id} takes NO query params — it is already account-scoped, and
-     *  sending `user_id` returns 422 `unknown_query_parameter`. */
-    get(runId: number): Promise<Run>;
+    /** GET /runs/{id}. Pass `user_id` to scope to one end-user (required when the
+     *  account has strict multi-tenant mode on). */
+    get(runId: number, params?: {
+        user_id?: string;
+    }): Promise<Run>;
     list(params?: RunListParams): Promise<Page<Run>>;
-    /** Cancel a running run. Returns the updated Run, like the Python SDK. */
-    cancel(runId: number): Promise<Run>;
+    /** Cancel a running run. Returns the updated Run, like the Python SDK.
+     *  Pass `user_id` when the account has strict multi-tenant mode on. */
+    cancel(runId: number, params?: {
+        user_id?: string;
+    }): Promise<Run>;
     /** Approve or deny a pending tool-permission gate. */
     approve(runId: number, params: ApproveParams): Promise<PermissionRequest>;
     /** Answer a pending AskUserQuestion gate, resuming the run. */
@@ -1672,7 +1698,7 @@ interface WebhooksResource {
  */
 
 /** Kept in lockstep with package.json "version" — guarded by test/version.test.ts. */
-declare const M8TES_SDK_VERSION = "0.1.0-alpha.2";
+declare const M8TES_SDK_VERSION = "0.1.0-alpha.3";
 declare class M8tes {
     readonly runs: RunsResource;
     readonly agents: AgentsResource;

package/dist/index.js

@@ -195,12 +195,14 @@ function createHttp(options = {}) {
 var Page = class {
   data;
   hasMore;
+  nextStartingAfter;
   /** Fetches the next page given a cursor. Absent on a terminal page. */
   fetchNext;
-  constructor(data, hasMore, fetchNext) {
+  constructor(data, hasMore, fetchNext, nextStartingAfter) {
     this.data = data;
     this.hasMore = hasMore;
     this.fetchNext = fetchNext;
+    this.nextStartingAfter = nextStartingAfter ?? null;
   }
   /**
    * Auto-paging: yields every item across every page.
@@ -218,7 +220,10 @@ var Page = class {
       yield* page.data;
       const last = page.data.at(-1);
       if (!page.hasMore || !last || !page.fetchNext) return;
-      const cursor = typeof last.id === "number" || typeof last.id === "string" ? last.id : typeof last.name === "string" ? last.name : void 0;
+      let cursor = page.nextStartingAfter === null || page.nextStartingAfter === void 0 ? void 0 : page.nextStartingAfter;
+      if (cursor === void 0) {
+        cursor = typeof last.id === "number" || typeof last.id === "string" ? last.id : typeof last.name === "string" ? last.name : void 0;
+      }
       if (cursor === void 0 || seen.has(cursor)) return;
       seen.add(cursor);
       page = await page.fetchNext(cursor);
@@ -270,7 +275,8 @@ function createAgentsResource(http) {
         return new Page(
           res?.data ?? [],
           res?.has_more ?? false,
-          (starting_after) => fetchPage({ ...p, starting_after })
+          (starting_after) => fetchPage({ ...p, starting_after }),
+          res?.next_starting_after
         );
       };
       return fetchPage({ ...params });
@@ -315,7 +321,7 @@ function createAppsResource(http) {
     const res = await http.request("GET", "/apps/", {
       query: toQuery({ user_id: params.user_id })
     });
-    return new Page(res?.data ?? [], res?.has_more ?? false);
+    return new Page(res?.data ?? [], res?.has_more ?? false, void 0, res?.next_starting_after);
   };
   return {
     list,
@@ -365,7 +371,8 @@ function pager(http, path) {
     return new Page(
       res?.data ?? [],
       res?.has_more ?? false,
-      (starting_after) => fetchPage({ ...p, starting_after })
+      (starting_after) => fetchPage({ ...p, starting_after }),
+      res?.next_starting_after
     );
   };
   return fetchPage;
@@ -467,7 +474,7 @@ function createModelsResource(http) {
   return {
     async list() {
       const res = await http.request("GET", "/models/");
-      return new Page(res?.data ?? [], res?.has_more ?? false);
+      return new Page(res?.data ?? [], res?.has_more ?? false, void 0, res?.next_starting_after);
     }
   };
 }
@@ -935,12 +942,15 @@ function createRunsResource(http) {
     return form;
   };
   const hasFiles = (p) => (p.files?.length ?? 0) > 0;
-  const deps = {
-    get: (runId, signal) => http.request("GET", `/runs/${seg(runId)}`, { signal }),
+  const pollDeps = (userId) => ({
+    get: (runId, signal) => http.request("GET", `/runs/${seg(runId)}`, {
+      query: toQuery({ user_id: userId }),
+      signal
+    }),
     permissions: async (runId, signal) => items(await http.request("GET", `/runs/${seg(runId)}/permissions`, { signal })),
     approve: (runId, params, signal) => http.request("POST", `/runs/${seg(runId)}/approve`, { body: { remember: false, ...params }, signal }),
     answer: (runId, params, signal) => http.request("POST", `/runs/${seg(runId)}/answer`, { body: params, signal })
-  };
+  });
   const createAsync = async (params) => {
     const headers = idempotencyHeaders(params.idempotencyKey);
     return hasFiles(params) ? http.request("POST", "/runs/with-files", { form: createForm(params, false), headers }) : http.request("POST", "/runs", { body: createBody(params, false), headers });
@@ -958,18 +968,26 @@ function createRunsResource(http) {
     createAsync,
     async createAndWait(params, options = {}) {
       if (options.signal?.aborted) throw new RunWaitAbortedError();
-      const started = await createAsync(params);
+      if (options.user_id != null && params.user_id != null && options.user_id !== params.user_id) {
+        throw new ValidationError(
+          `createAndWait: options.user_id (${JSON.stringify(options.user_id)}) conflicts with params.user_id (${JSON.stringify(params.user_id)}). Use one scope for create and poll.`,
+          { type: "invalid_request_error", code: 0, status: 0 }
+        );
+      }
+      const createParams = params.user_id == null && options.user_id != null ? { ...params, user_id: options.user_id } : params;
+      const started = await createAsync(createParams);
+      const userId = started.user_id ?? createParams.user_id ?? void 0;
       try {
-        return await waitForRun(deps, started.id, options);
+        return await waitForRun(pollDeps(userId), started.id, { ...options, user_id: userId });
       } catch (err) {
         throw withRunId(err, started.id);
       }
     },
-    poll(runId, options) {
-      return pollRun(deps, runId, options);
+    poll(runId, options = {}) {
+      return pollRun(pollDeps(options.user_id), runId, options);
     },
-    wait(runId, options) {
-      return waitForRun(deps, runId, options);
+    wait(runId, options = {}) {
+      return waitForRun(pollDeps(options.user_id), runId, options);
     },
     // `confirm` is a QUERY param and the route takes no body (verified against
     // fastapi/app/routers/v2/runs.py::retry_run), so send neither.
@@ -991,8 +1009,10 @@ function createRunsResource(http) {
         options
       );
     },
-    get(runId) {
-      return http.request("GET", `/runs/${seg(runId)}`);
+    get(runId, params = {}) {
+      return http.request("GET", `/runs/${seg(runId)}`, {
+        query: toQuery({ user_id: params.user_id })
+      });
     },
     async list(params = {}) {
       const { agent_id, teammate_id, ...rest } = params;
@@ -1004,13 +1024,16 @@ function createRunsResource(http) {
         return new Page(
           res?.data ?? [],
           res?.has_more ?? false,
-          (starting_after) => fetchPage({ ...p, starting_after })
+          (starting_after) => fetchPage({ ...p, starting_after }),
+          res?.next_starting_after
         );
       };
       return fetchPage(q);
     },
-    cancel(runId) {
-      return http.request("POST", `/runs/${seg(runId)}/cancel`, { body: {} });
+    cancel(runId, params = {}) {
+      return http.request("POST", `/runs/${seg(runId)}/cancel`, {
+        query: toQuery({ user_id: params.user_id })
+      });
     },
     approve(runId, params) {
       return http.request("POST", `/runs/${seg(runId)}/approve`, {
@@ -1101,7 +1124,8 @@ function createTasksResource(http) {
         return new Page(
           res?.data ?? [],
           res?.has_more ?? false,
-          (starting_after) => fetchPage({ ...p, starting_after })
+          (starting_after) => fetchPage({ ...p, starting_after }),
+          res?.next_starting_after
         );
       };
       return fetchPage(q);
@@ -1204,7 +1228,7 @@ function createWebhooksResource(http) {
 }
 
 // src/index.ts
-var M8TES_SDK_VERSION = "0.1.0-alpha.2";
+var M8TES_SDK_VERSION = "0.1.0-alpha.3";
 var M8tes = class {
   runs;
   agents;