@managoat/fountain-sdk 2.0.0 → 2.1.0

package/CHANGELOG.md

@@ -11,6 +11,20 @@ server releases.
 
 ---
 
+## [2.1.0] — 2026-09-13
+
+### Added
+
+- Wire types for inference credential sets (ADR 0053): the four operations
+  under `/api/account/inference-credential-sets`, the per-set credential write
+  and clear, `inference_credential_id` on the conversation-create request,
+  `inference_credential_id` and `allowed_inference_credential_ids` on the
+  agent, and the owner-authenticated principal credential write under
+  `/api/claimable-users/:id/inference-credentials/:provider`.
+
+  Generated types only. No hand-written client method changes, so nothing an
+  existing caller uses moves.
+
 ## [2.0.0] - 2026-09-13
 
 ### Breaking changes

package/dist/generated/openapi.d.ts

@@ -124,6 +124,75 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/account/inference-credential-sets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List inference credential sets
+         * @description The default set first, then by name. Values are never returned.
+         */
+        get: operations["FountainWeb.InferenceCredentialSetController.index"];
+        put?: never;
+        /**
+         * Create an inference credential set
+         * @description Creates an empty set. The first set an account has is its default, whoever asked for it; every later one is not until it is promoted.
+         */
+        post: operations["FountainWeb.InferenceCredentialSetController.create"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/account/inference-credential-sets/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete an inference credential set
+         * @description Refused for the default set: something has to answer which credential runs this account. Promote another first. Deleting a set removes its credentials; conversations bound to that source refuse to resume with inference_source_changed.
+         */
+        delete: operations["FountainWeb.InferenceCredentialSetController.delete"];
+        options?: never;
+        head?: never;
+        /**
+         * Rename an inference credential set, or make it the default
+         * @description Omitting a field leaves it alone. `is_default: false` is refused: a set stops being the default when another becomes it, never on its own, because an account with no default has nothing to read a credential from.
+         */
+        patch: operations["FountainWeb.InferenceCredentialSetController.update"];
+        trace?: never;
+    };
+    "/api/account/inference-credential-sets/{id}/credentials/{provider}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Set a provider credential inside a named set
+         * @description The same validate-then-store path as PUT /inference-credentials/:provider, against a set the caller names instead of the account's default (ADR 0053 decision 1). This is what puts a second subscription's key somewhere an agent can point at.
+         */
+        put: operations["FountainWeb.InferenceCredentialController.update_in_set"];
+        post?: never;
+        /** Clear a provider credential inside a named set */
+        delete: operations["FountainWeb.InferenceCredentialController.delete_in_set"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/account/inference-credentials": {
         parameters: {
             query?: never;
@@ -1015,6 +1084,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/claimable-users/{id}/inference-credentials/{provider}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Set a provider credential on a principal
+         * @description Stores the credential encrypted under the principal's own tenant key. A principal is a first-class tenant and a `principal`-scoped key cannot write account state. Only the current owner may write: the opening application before claim, and the claiming account afterward. Expired and released grants refuse writes. The principal's own credential gains nothing from this route.
+         */
+        put: operations["FountainWeb.ClaimableUserController.put_inference_credential"];
+        post?: never;
+        /** Clear a provider credential on a principal */
+        delete: operations["FountainWeb.ClaimableUserController.delete_inference_credential"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/connection-providers": {
         parameters: {
             query?: never;
@@ -2726,6 +2816,8 @@ export interface components {
             readonly acp?: boolean;
             /** @description Environments a conversation may launch this agent under instead of its own (environment_id on create). Same shape as allowed_vault_ids: null (default) allows any environment the tenant owns; an empty list forbids overriding; a non-empty list is an allowlist. The agent's own environment always passes. */
             allowed_environment_ids?: string[] | null;
+            /** @description Credential sets a conversation may launch this agent on instead of the agent's (inference_credential_id on create). Same shape as allowed_vault_ids: null (default) allows any set the tenant owns; an empty list forbids overriding; a non-empty list is an allowlist. The agent's own set always passes. */
+            allowed_inference_credential_ids?: string[] | null;
             /** @description Vaults a conversation may attach to this agent. null (default) allows any vault the tenant owns; an empty list forbids attaching any vault; a non-empty list is an allowlist. Vault values override the agent's environment on key collision, so this scopes who can override reviewed config. */
             allowed_vault_ids?: string[] | null;
             /**
@@ -2740,6 +2832,11 @@ export interface components {
             environment_id?: string | null;
             /** Format: uuid */
             id: string;
+            /**
+             * Format: uuid
+             * @description The credential set this agent's conversations run on. null (default) is the account's default set, which is what every agent had before an account could hold more than one.
+             */
+            inference_credential_id?: string | null;
             /** Format: date-time */
             inserted_at?: string;
             mcp_servers?: {
@@ -2796,11 +2893,18 @@ export interface components {
         AgentRequest: {
             /** @description Environments a conversation may launch this agent under instead of its own. Same shape as allowed_vault_ids: null (default) allows any environment the tenant owns; an empty list forbids overriding; a non-empty list is an allowlist. The agent's own environment always passes. */
             allowed_environment_ids?: string[] | null;
+            /** @description Credential sets a conversation may launch this agent on instead of the agent's (inference_credential_id on create). Same shape as allowed_vault_ids: null (default) allows any set the tenant owns; an empty list forbids overriding; a non-empty list is an allowlist. The agent's own set always passes. */
+            allowed_inference_credential_ids?: string[] | null;
             /** @description Vaults a conversation may attach to this agent. null (default) allows any vault the tenant owns; an empty list forbids attaching any vault; a non-empty list is an allowlist. */
             allowed_vault_ids?: string[] | null;
             description?: string;
             /** Format: uuid */
             environment_id?: string | null;
+            /**
+             * Format: uuid
+             * @description The credential set this agent's conversations run on. null (default) is the account's default set, which is what every agent had before an account could hold more than one.
+             */
+            inference_credential_id?: string | null;
             mcp_servers?: {
                 [key: string]: unknown;
             };
@@ -2851,11 +2955,18 @@ export interface components {
         AgentUpdate: {
             /** @description Environments a conversation may launch this agent under instead of its own (environment_id on create). Same shape as allowed_vault_ids: null (default) allows any environment the tenant owns; an empty list forbids overriding; a non-empty list is an allowlist. The agent's own environment always passes. */
             allowed_environment_ids?: string[] | null;
+            /** @description Credential sets a conversation may launch this agent on instead of the agent's (inference_credential_id on create). Same shape as allowed_vault_ids: null (default) allows any set the tenant owns; an empty list forbids overriding; a non-empty list is an allowlist. The agent's own set always passes. */
+            allowed_inference_credential_ids?: string[] | null;
             /** @description Vaults a conversation may attach to this agent. null (default) allows any vault the tenant owns; an empty list forbids attaching any vault; a non-empty list is an allowlist. */
             allowed_vault_ids?: string[] | null;
             description?: string;
             /** Format: uuid */
             environment_id?: string | null;
+            /**
+             * Format: uuid
+             * @description The credential set this agent's conversations run on. null (default) is the account's default set, which is what every agent had before an account could hold more than one.
+             */
+            inference_credential_id?: string | null;
             mcp_servers?: {
                 [key: string]: unknown;
             };
@@ -3736,6 +3847,11 @@ export interface components {
             fresh?: boolean | null;
             /** @description Optional images to attach to the initial prompt. They require that prompt: images with no opening text are refused with 422 invalid_prompt, and an image whose media_type is unsupported or whose decoded bytes are empty or over the 10MB ceiling is refused with 422 invalid_images. Both refusals happen before a sandbox is reserved. */
             images?: components["schemas"]["ImageInput"][] | null;
+            /**
+             * Format: uuid
+             * @description Optional credential set to run on instead of the agent's; the conversation stays pinned to it across wakes. Must be owned by the caller (404 inference_credential_not_found otherwise) and satisfy the agent's allowed_inference_credential_ids when that allowlist is set (422 inference_credential_not_allowed). An unusable selected set is 422 inference_credential_unusable. The resolved source and revision stay bound across wakes; replacing or deleting the source returns 409 inference_source_changed. Not part of sandbox identity, but a shared Codex sandbox requires the same resolved source and revision (409 codex_inference_conflict otherwise).
+             */
+            inference_credential_id?: string | null;
             /** @description Key/value strings to stamp on the conversation. At most 32 entries; a key is at most 64 bytes and a value at most 256 bytes, and a 422 names the offending key under `errors.labels`. With channel_id, a resume merges these into the conversation it hands back rather than dropping them. */
             labels?: {
                 [key: string]: string;
@@ -3833,6 +3949,14 @@ export interface components {
         ConversationTreeResponse: {
             data: components["schemas"]["ConversationTreeNode"][];
         };
+        /** CredentialSetDeletionError */
+        CredentialSetDeletionError: {
+            /** @enum {string} */
+            error: "credential_set_is_default";
+            message: string;
+            /** @enum {string} */
+            reason: "is_default";
+        };
         /**
          * CreditsCheckoutRequest
          * @example {
@@ -3928,8 +4052,6 @@ export interface components {
         Environment: {
             /** @description Agents referencing this environment — 0 means safe to delete. */
             agent_count?: number;
-            /** @description Environments a conversation may launch this agent under instead of its own (environment_id on create). Same shape as allowed_vault_ids: null (default) allows any environment the tenant owns; an empty list forbids overriding; a non-empty list is an allowlist. The agent's own environment always passes. */
-            allowed_environment_ids?: string[] | null;
             env_vars?: {
                 [key: string]: string;
             };
@@ -4091,6 +4213,44 @@ export interface components {
         InferenceCredentialResponse: {
             data: components["schemas"]["InferenceCredentialStatus"];
         };
+        /**
+         * InferenceCredentialSet
+         * @description One named set of a tenant's inference credentials. An account holds one or more and exactly one is the default; an agent or a launch may name another. Values are never returned — `providers` reports only which of them this set holds.
+         */
+        InferenceCredentialSet: {
+            /** Format: uuid */
+            id: string;
+            /** Format: date-time */
+            inserted_at: string;
+            /** @description The set every surface reads unless something names another. Exactly one per account, and it cannot be deleted. */
+            is_default: boolean;
+            name: string;
+            /** @description The credentials this set holds, by name. Never the values. */
+            providers: ("anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key")[];
+            /** Format: date-time */
+            updated_at: string;
+        };
+        /** InferenceCredentialSetCreateRequest */
+        InferenceCredentialSetCreateRequest: {
+            /** @description Unique within the account. */
+            name: string;
+        };
+        /** InferenceCredentialSetListResponse */
+        InferenceCredentialSetListResponse: {
+            data: components["schemas"]["InferenceCredentialSet"][];
+        };
+        /** InferenceCredentialSetResponse */
+        InferenceCredentialSetResponse: {
+            data: components["schemas"]["InferenceCredentialSet"];
+        };
+        /**
+         * InferenceCredentialSetUpdateRequest
+         * @description Rename a set, make it the default, or both. Omitting a field leaves it alone. `is_default: false` is refused: a set stops being the default when another becomes it, never on its own.
+         */
+        InferenceCredentialSetUpdateRequest: {
+            is_default?: boolean;
+            name?: string;
+        };
         /**
          * InferenceCredentialStatus
          * @description Whether a provider credential is set for the tenant. Values are write-only — the API never returns a credential, truncated or otherwise.
@@ -5879,7 +6039,7 @@ export interface operations {
             };
         };
     };
-    "FountainWeb.InferenceCredentialController.index": {
+    "FountainWeb.InferenceCredentialSetController.index": {
         parameters: {
             query?: never;
             header?: never;
@@ -5888,13 +6048,13 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Provider status */
+            /** @description Credential sets */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["InferenceCredentialListResponse"];
+                    "application/json": components["schemas"]["InferenceCredentialSetListResponse"];
                 };
             };
             /** @description Unauthorized */
@@ -5935,29 +6095,27 @@ export interface operations {
             };
         };
     };
-    "FountainWeb.InferenceCredentialController.update": {
+    "FountainWeb.InferenceCredentialSetController.create": {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
-            };
+            path?: never;
             cookie?: never;
         };
-        /** @description Credential */
+        /** @description Credential set */
         requestBody?: {
             content: {
-                "application/json": components["schemas"]["InferenceCredentialRequest"];
+                "application/json": components["schemas"]["InferenceCredentialSetCreateRequest"];
             };
         };
         responses: {
-            /** @description Provider status */
-            200: {
+            /** @description Credential set */
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["InferenceCredentialResponse"];
+                    "application/json": components["schemas"]["InferenceCredentialSetResponse"];
                 };
             };
             /** @description Unauthorized */
@@ -5987,7 +6145,7 @@ export interface operations {
                     "application/json": components["schemas"]["NegotiationError"];
                 };
             };
-            /** @description Rejected credential, blank value, or unknown provider */
+            /** @description Invalid or duplicate name */
             422: {
                 headers: {
                     [name: string]: unknown;
@@ -6005,38 +6163,20 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Provider unreachable */
-            502: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Error"];
-                };
-            };
-            /** @description Provider timed out */
-            504: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Error"];
-                };
-            };
         };
     };
-    "FountainWeb.InferenceCredentialController.delete": {
+    "FountainWeb.InferenceCredentialSetController.delete": {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
+                id: string;
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Cleared */
+            /** @description Deleted */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -6061,6 +6201,15 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description No such set */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description No acceptable representation */
             406: {
                 headers: {
@@ -6070,13 +6219,13 @@ export interface operations {
                     "application/json": components["schemas"]["NegotiationError"];
                 };
             };
-            /** @description Unknown provider */
+            /** @description The default set cannot be deleted */
             422: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Error"];
+                    "application/json": components["schemas"]["CredentialSetDeletionError"];
                 };
             };
             /** @description Too Many Requests */
@@ -6090,22 +6239,29 @@ export interface operations {
             };
         };
     };
-    "FountainWeb.OnboardingController.show": {
+    "FountainWeb.InferenceCredentialSetController.update": {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                id: string;
+            };
             cookie?: never;
         };
-        requestBody?: never;
+        /** @description Changes */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["InferenceCredentialSetUpdateRequest"];
+            };
+        };
         responses: {
-            /** @description Onboarding state */
+            /** @description Credential set */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["OnboardingResponse"];
+                    "application/json": components["schemas"]["InferenceCredentialSetResponse"];
                 };
             };
             /** @description Unauthorized */
@@ -6126,6 +6282,15 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description No such set */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description No acceptable representation */
             406: {
                 headers: {
@@ -6135,6 +6300,15 @@ export interface operations {
                     "application/json": components["schemas"]["NegotiationError"];
                 };
             };
+            /** @description Invalid or duplicate name */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description Too Many Requests */
             429: {
                 headers: {
@@ -6146,22 +6320,30 @@ export interface operations {
             };
         };
     };
-    "FountainWeb.OnboardingController.complete": {
+    "FountainWeb.InferenceCredentialController.update_in_set": {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                id: string;
+                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
+            };
             cookie?: never;
         };
-        requestBody?: never;
+        /** @description Credential */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["InferenceCredentialRequest"];
+            };
+        };
         responses: {
-            /** @description Onboarding state */
+            /** @description Provider status for the set */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["OnboardingResponse"];
+                    "application/json": components["schemas"]["InferenceCredentialResponse"];
                 };
             };
             /** @description Unauthorized */
@@ -6182,6 +6364,15 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description No such set */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description No acceptable representation */
             406: {
                 headers: {
@@ -6191,6 +6382,15 @@ export interface operations {
                     "application/json": components["schemas"]["NegotiationError"];
                 };
             };
+            /** @description Rejected credential, blank value, or unknown provider */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description Too Many Requests */
             429: {
                 headers: {
@@ -6200,28 +6400,44 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description Provider unreachable */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Provider timed out */
+            504: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
         };
     };
-    "FountainWeb.AdminController.index_audit": {
+    "FountainWeb.InferenceCredentialController.delete_in_set": {
         parameters: {
-            query?: {
-                /** @description 1..500, default 100. */
-                limit?: number;
-            };
+            query?: never;
             header?: never;
-            path?: never;
+            path: {
+                id: string;
+                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
+            };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Audit events */
-            200: {
+            /** @description Cleared */
+            204: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["AdminAuditListResponse"];
-                };
+                content?: never;
             };
             /** @description Unauthorized */
             401: {
@@ -6232,7 +6448,407 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Admin required */
+            /** @description Insufficient scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No such set */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Unknown provider */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "FountainWeb.InferenceCredentialController.index": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Provider status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["InferenceCredentialListResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Insufficient scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "FountainWeb.InferenceCredentialController.update": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
+            };
+            cookie?: never;
+        };
+        /** @description Credential */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["InferenceCredentialRequest"];
+            };
+        };
+        responses: {
+            /** @description Provider status */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["InferenceCredentialResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Insufficient scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Rejected credential, blank value, or unknown provider */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Provider unreachable */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Provider timed out */
+            504: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "FountainWeb.InferenceCredentialController.delete": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Cleared */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Insufficient scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Unknown provider */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "FountainWeb.OnboardingController.show": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Onboarding state */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OnboardingResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Insufficient scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "FountainWeb.OnboardingController.complete": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Onboarding state */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OnboardingResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Insufficient scope */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "FountainWeb.AdminController.index_audit": {
+        parameters: {
+            query?: {
+                /** @description 1..500, default 100. */
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Audit events */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AdminAuditListResponse"];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Admin required */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -9757,6 +10373,163 @@ export interface operations {
             };
         };
     };
+    "FountainWeb.ClaimableUserController.put_inference_credential": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The grant's id. */
+                id: string;
+                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
+            };
+            cookie?: never;
+        };
+        /** @description Credential */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["InferenceCredentialRequest"];
+            };
+        };
+        responses: {
+            /** @description Stored */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid key */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not a full-scope key */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No such grant */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Blank value or unknown provider */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    "FountainWeb.ClaimableUserController.delete_inference_credential": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The grant's id. */
+                id: string;
+                provider: "anthropic_api_key" | "claude_code_oauth_token" | "openai_api_key" | "gemini_api_key";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Cleared */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Missing or invalid key */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Not a full-scope key */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No such grant */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description No acceptable representation */
+            406: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["NegotiationError"];
+                };
+            };
+            /** @description Unknown provider */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     "FountainWeb.ConnectionProviderController.index": {
         parameters: {
             query?: never;
@@ -10645,7 +11418,7 @@ export interface operations {
                     "application/json": components["schemas"]["NegotiationError"];
                 };
             };
-            /** @description Conflicting state */
+            /** @description Conflicting state, changed inference source, or incompatible Codex sandbox credential */
             409: {
                 headers: {
                     [name: string]: unknown;

package/dist/http.d.ts

@@ -15,7 +15,7 @@ export interface RequestOptions {
  * this string is already what Fountain's request logs are keyed on. The
  * version half is asserted against `package.json` by a test.
  */
-export declare const USER_AGENT = "fountain-sdk-js/2.0.0";
+export declare const USER_AGENT = "fountain-sdk-js/2.1.0";
 export declare class HttpClient {
     readonly config: ResolvedConfig;
     private readonly fetchImpl;

package/dist/http.js

@@ -5,7 +5,7 @@ import { AuthError, ConnectionError, FountainError, errorForStatus } from "./err
  * this string is already what Fountain's request logs are keyed on. The
  * version half is asserted against `package.json` by a test.
  */
-export const USER_AGENT = "fountain-sdk-js/2.0.0";
+export const USER_AGENT = "fountain-sdk-js/2.1.0";
 /**
  * The thin layer everything else is built on: one bearer token, JSON in and
  * out, and errors that say which call failed. `Fountain#api` exposes it

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@managoat/fountain-sdk",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Run a coding agent on a real computer, with your repos and your credentials, in one call.",
   "license": "Apache-2.0",
   "publishConfig": {