@pnds/sdk 0.1.1 → 0.2.0

package/dist/ws.d.ts

@@ -1,6 +1,30 @@
 import type { WsEventMap, WsTicketResponse } from './types.js';
 export type WsEventType = keyof WsEventMap;
 export type WsEventHandler<T extends WsEventType> = (data: WsEventMap[T], seq?: number) => void;
+export type WsClientEventMap = {
+    'ping': {
+        ts: number;
+    };
+    'typing': {
+        chat_id: string;
+        thread_root_id: string | null;
+        action: 'start' | 'stop';
+    };
+    'ack': {
+        message_id: string;
+    };
+    'read': {
+        chat_id: string;
+        last_read_id: string;
+    };
+    'watch': {
+        chat_ids: string[];
+    };
+    'agent.heartbeat': {
+        session_id: string;
+        telemetry?: Record<string, unknown>;
+    };
+};
 export type WsConnectionState = 'connecting' | 'connected' | 'disconnected' | 'reconnecting';
 export interface PondWsOptions {
     /** Async function that fetches a one-time WS ticket from the API. */

package/dist/ws.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ws.d.ts","sourceRoot":"","sources":["../src/ws.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAW,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExE,MAAM,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC;AAC3C,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,WAAW,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAEhG,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,cAAc,CAAC;AAE7F,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,SAAS,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,qBAAa,MAAM;IACjB,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,OAAO,CAAkG;IACjH,OAAO,CAAC,SAAS,CAAuD;IACxE,OAAO,CAAC,cAAc,CAAiD;IACvE,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,MAAM,CAAqC;IACnD,OAAO,CAAC,gBAAgB,CAAS;gBAErB,OAAO,EAAE,aAAa;IAUlC,IAAI,KAAK,IAAI,iBAAiB,CAE7B;IAEK,OAAO;IA+Db,UAAU;IAaV,wFAAwF;IACxF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE;IAIvB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;IAO1E,OAAO,CAAC,SAAS,EAAE,MAAM;IAIzB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAI3C,mDAAmD;IACnD,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAOzE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;IAMrC,EAAE,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAY9D,GAAG,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAI/D,aAAa,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI;IASzD,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,WAAW;IAqBnB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,QAAQ;CAMjB"}
+{"version":3,"file":"ws.d.ts","sourceRoot":"","sources":["../src/ws.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAW,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExE,MAAM,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC;AAC3C,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,WAAW,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAEhG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAC;IACvF,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChC,iBAAiB,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAChF,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,cAAc,CAAC;AAE7F,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,SAAS,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,qBAAa,MAAM;IACjB,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,OAAO,CAAkG;IACjH,OAAO,CAAC,SAAS,CAAuD;IACxE,OAAO,CAAC,cAAc,CAAiD;IACvE,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,MAAM,CAAqC;IACnD,OAAO,CAAC,gBAAgB,CAAS;gBAErB,OAAO,EAAE,aAAa;IAUlC,IAAI,KAAK,IAAI,iBAAiB,CAE7B;IAEK,OAAO;IAqFb,UAAU;IAaV,wFAAwF;IACxF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE;IAIvB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;IAO1E,OAAO,CAAC,SAAS,EAAE,MAAM;IAIzB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAI3C,mDAAmD;IACnD,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAOzE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;IAMrC,EAAE,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAY9D,GAAG,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAI/D,aAAa,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI;IASzD,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,WAAW;IAqBnB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,QAAQ;CAMjB"}

package/dist/ws.js

@@ -50,7 +50,33 @@ export class PondWs {
             params.set('last_seq', String(this.lastSeq));
         }
         this.ws = new WebSocket(`${wsUrl}?${params.toString()}`);
+        // Force-reconnect if not connected within 15s.
+        // Handles edge case where Node 22 WebSocket transitions to CLOSED without
+        // firing onclose (e.g. TCP reset during Cloudflare rolling update).
+        const ws = this.ws;
+        const connectTimeout = setTimeout(() => {
+            if (this._state === 'connected' || this.intentionalClose)
+                return;
+            ws.onclose = null;
+            ws.onopen = null;
+            ws.onerror = null;
+            try {
+                ws.close();
+            }
+            catch { /* ignore */ }
+            // Only reconnect if this socket is still the active one.
+            // If connect() was called again, a newer socket owns the lifecycle.
+            if (ws !== this.ws)
+                return;
+            if (this.options.reconnect) {
+                this.scheduleReconnect();
+            }
+            else {
+                this.setState('disconnected');
+            }
+        }, 15_000);
         this.ws.onopen = () => {
+            clearTimeout(connectTimeout);
             this.reconnectAttempts = 0;
             this.setState('connected');
         };
@@ -64,6 +90,7 @@ export class PondWs {
             }
         };
         this.ws.onclose = () => {
+            clearTimeout(connectTimeout);
             this.stopHeartbeat();
             if (this.intentionalClose) {
                 this.setState('disconnected');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnds/sdk",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "TypeScript client SDK for Pond — REST + WebSocket client, shared types",
   "license": "MIT",
   "repository": {

package/src/client.ts

@@ -2,6 +2,7 @@ import { ENDPOINTS } from './constants.js';
 import type {
   AuthTokens,
   RegisterRequest,
+  RegisterResponse,
   LoginRequest,
   CheckEmailResponse,
   User,
@@ -19,35 +20,64 @@ import type {
   Approval,
   PresignResponse,
   PresignUploadRequest,
+  FileUrlResponse,
   CreateAgentRequest,
   CreateAgentResponse,
   AgentWithRuntime,
   ApiKey,
   WsTicketResponse,
-  HostedStatus,
+  Machine,
   WorkspaceFiles,
   Task,
   CreateTaskRequest,
   UpdateTaskRequest,
   TaskRelation,
   CreateTaskRelationRequest,
+  TaskComment,
+  CreateTaskCommentRequest,
+  UpdateTaskCommentRequest,
+  TaskActivity,
+  Project,
+  CreateProjectRequest,
+  UpdateProjectRequest,
+  AgentRunDB,
+  AgentStep,
+  CreateAgentRunRequest,
+  CreateAgentStepRequest,
+  UpdateAgentRunRequest,
+  OrgInvitation,
+  InvitationPublicInfo,
+  PlatformConfigResponse,
 } from './types.js';
 
 export interface PondClientOptions {
   baseUrl?: string;
   token?: string;
   onTokenExpired?: () => void;
+  getRefreshToken?: () => string | null;
+  setTokens?: (tokens: { access_token: string; refresh_token: string }) => void;
 }
 
 export class PondClient {
   private baseUrl: string;
   private token: string | null;
   private onTokenExpired?: () => void;
+  private getRefreshToken?: () => string | null;
+  private setTokens?: (tokens: { access_token: string; refresh_token: string }) => void;
+  private refreshPromise: Promise<AuthTokens> | null = null;
+
+  /** Auth endpoints excluded from automatic 401 refresh to prevent recursion. */
+  private static readonly AUTH_PATHS = new Set([
+    '/auth/login', '/auth/register', '/auth/refresh',
+    '/auth/verify-email', '/auth/resend-code', '/auth/check-email',
+  ]);
 
   constructor(options: PondClientOptions = {}) {
     this.baseUrl = options.baseUrl ?? '';
     this.token = options.token ?? null;
     this.onTokenExpired = options.onTokenExpired;
+    this.getRefreshToken = options.getRefreshToken;
+    this.setTokens = options.setTokens;
   }
 
   setToken(token: string | null) {
@@ -58,11 +88,36 @@ export class PondClient {
     return this.token;
   }
 
+  /**
+   * Single-flight token refresh. Multiple concurrent 401s share one promise
+   * so only one refresh request is made.
+   */
+  private async tryRefresh(): Promise<boolean> {
+    const rt = this.getRefreshToken?.();
+    if (!rt) return false;
+
+    if (!this.refreshPromise) {
+      this.refreshPromise = this.refreshToken(rt);
+    }
+
+    try {
+      const tokens = await this.refreshPromise;
+      this.setToken(tokens.access_token);
+      this.setTokens?.(tokens);
+      return true;
+    } catch {
+      return false;
+    } finally {
+      this.refreshPromise = null;
+    }
+  }
+
   private async request<T>(
     method: string,
     path: string,
     body?: unknown,
     query?: Record<string, string | number | boolean | undefined>,
+    retried = false,
   ): Promise<T> {
     let url = `${this.baseUrl}${path}`;
 
@@ -84,14 +139,36 @@ export class PondClient {
       headers['Authorization'] = `Bearer ${this.token}`;
     }
 
-    const res = await fetch(url, {
-      method,
-      headers,
-      body: body ? JSON.stringify(body) : undefined,
-    });
+    let res: Response;
+    try {
+      res = await fetch(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : undefined,
+        signal: AbortSignal.timeout(15_000),
+      });
+    } catch (err) {
+      if (err instanceof DOMException && err.name === 'TimeoutError') {
+        throw new ApiError(0, 'Request timed out', 'REQUEST_TIMEOUT');
+      }
+      throw err;
+    }
 
-    if (res.status === 401 && this.onTokenExpired) {
-      this.onTokenExpired();
+    if (res.status === 401) {
+      const pathSuffix = path.replace(/^\/api\/v1/, '');
+      const isAuthPath = PondClient.AUTH_PATHS.has(pathSuffix);
+      if (!retried && !isAuthPath && this.getRefreshToken) {
+        const refreshed = await this.tryRefresh();
+        if (refreshed) {
+          // Retry once with the new token
+          return this.request<T>(method, path, body, query, true);
+        }
+      }
+      // Only fire for non-auth paths — auth endpoints (e.g. /auth/refresh)
+      // just throw; the original caller's path handles the notification.
+      if (this.onTokenExpired && !isAuthPath) {
+        this.onTokenExpired();
+      }
     }
 
     if (!res.ok) {
@@ -108,7 +185,7 @@ export class PondClient {
 
   // ---- Auth ----
 
-  async register(req: RegisterRequest): Promise<AuthTokens> {
+  async register(req: RegisterRequest): Promise<RegisterResponse> {
     return this.request('POST', ENDPOINTS.AUTH_REGISTER, req);
   }
 
@@ -128,7 +205,7 @@ export class PondClient {
     return this.request('POST', ENDPOINTS.AUTH_CHECK_EMAIL, { email });
   }
 
-  async verifyEmail(email: string, code: string): Promise<void> {
+  async verifyEmail(email: string, code: string): Promise<AuthTokens> {
     return this.request('POST', ENDPOINTS.AUTH_VERIFY_EMAIL, { email, code });
   }
 
@@ -189,10 +266,6 @@ export class PondClient {
     return res.data;
   }
 
-  async addOrgMember(orgId: string, userId: string, role?: OrgMemberRole): Promise<void> {
-    return this.request('POST', ENDPOINTS.ORG_MEMBERS(orgId), { user_id: userId, role: role ?? 'member' });
-  }
-
   async removeOrgMember(orgId: string, userId: string): Promise<void> {
     return this.request('DELETE', ENDPOINTS.ORG_MEMBER(orgId, userId));
   }
@@ -201,6 +274,42 @@ export class PondClient {
     return this.request('PATCH', ENDPOINTS.ORG_MEMBER(orgId, userId), { role });
   }
 
+  // ---- Invitations ----
+
+  async createInvitation(orgId: string, email: string, role?: OrgMemberRole): Promise<OrgInvitation> {
+    return this.request('POST', ENDPOINTS.ORG_INVITATIONS(orgId), { email, role });
+  }
+
+  async getOrgInvitations(orgId: string): Promise<OrgInvitation[]> {
+    const res = await this.request<{ data: OrgInvitation[] }>('GET', ENDPOINTS.ORG_INVITATIONS(orgId));
+    return res.data;
+  }
+
+  async revokeInvitation(orgId: string, invId: string): Promise<void> {
+    return this.request('DELETE', ENDPOINTS.ORG_INVITATION(orgId, invId));
+  }
+
+  async resendInvitation(orgId: string, invId: string): Promise<void> {
+    return this.request('POST', ENDPOINTS.ORG_INVITATION_RESEND(orgId, invId));
+  }
+
+  async getMyInvitations(): Promise<OrgInvitation[]> {
+    const res = await this.request<{ data: OrgInvitation[] }>('GET', ENDPOINTS.MY_INVITATIONS);
+    return res.data;
+  }
+
+  async acceptInvitation(id: string): Promise<OrgMember> {
+    return this.request('POST', ENDPOINTS.INVITATION_ACCEPT(id));
+  }
+
+  async declineInvitation(id: string): Promise<void> {
+    return this.request('POST', ENDPOINTS.INVITATION_DECLINE(id));
+  }
+
+  async getInvitationByToken(token: string): Promise<InvitationPublicInfo> {
+    return this.request('GET', ENDPOINTS.INVITATION_BY_TOKEN(token));
+  }
+
   // ---- Chats (org-scoped) ----
 
   async createChat(orgId: string, req: Omit<CreateChatRequest, 'org_id'>): Promise<Chat> {
@@ -287,12 +396,16 @@ export class PondClient {
 
   // ---- File Upload ----
 
-  async getUploadPresignUrl(req: PresignUploadRequest): Promise<PresignResponse> {
-    return this.request('POST', ENDPOINTS.UPLOAD_PRESIGN, req);
+  async getUploadPresignUrl(orgId: string, req: PresignUploadRequest): Promise<PresignResponse> {
+    return this.request('POST', ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
+  }
+
+  async completeUpload(orgId: string, attachmentId: string): Promise<{ attachment_id: string }> {
+    return this.request('POST', ENDPOINTS.UPLOAD_COMPLETE(orgId), { attachment_id: attachmentId });
   }
 
-  async completeUpload(attachmentId: string): Promise<{ attachment_id: string }> {
-    return this.request('POST', ENDPOINTS.UPLOAD_COMPLETE, { attachment_id: attachmentId });
+  async getFileUrl(id: string): Promise<FileUrlResponse> {
+    return this.request('GET', ENDPOINTS.FILE(id));
   }
 
   // ---- Approvals ----
@@ -342,24 +455,67 @@ export class PondClient {
     return res.data;
   }
 
-  async startAgent(orgId: string, agentId: string): Promise<void> {
-    return this.request('POST', ENDPOINTS.AGENT_START(orgId, agentId));
+  // ---- Agent Runs (org-scoped) ----
+
+  async createAgentRun(orgId: string, agentId: string, req: CreateAgentRunRequest): Promise<AgentRunDB> {
+    return this.request('POST', ENDPOINTS.AGENT_RUNS(orgId, agentId), req);
+  }
+
+  async getAgentRuns(orgId: string, agentId: string, params?: { limit?: number }): Promise<AgentRunDB[]> {
+    const res = await this.request<{ data: AgentRunDB[] }>('GET', ENDPOINTS.AGENT_RUNS(orgId, agentId), undefined, params);
+    return res.data;
+  }
+
+  async getAgentRun(orgId: string, agentId: string, runId: string): Promise<AgentRunDB> {
+    return this.request('GET', ENDPOINTS.AGENT_RUN(orgId, agentId, runId));
+  }
+
+  async updateAgentRun(orgId: string, agentId: string, runId: string, req: UpdateAgentRunRequest): Promise<AgentRunDB> {
+    return this.request('PATCH', ENDPOINTS.AGENT_RUN(orgId, agentId, runId), req);
+  }
+
+  async createAgentStep(orgId: string, agentId: string, runId: string, req: CreateAgentStepRequest): Promise<AgentStep> {
+    return this.request('POST', ENDPOINTS.AGENT_RUN_STEPS(orgId, agentId, runId), req);
+  }
+
+  async getAgentRunSteps(orgId: string, agentId: string, runId: string, params?: { limit?: number }): Promise<AgentStep[]> {
+    const res = await this.request<{ data: AgentStep[] }>('GET', ENDPOINTS.AGENT_RUN_STEPS(orgId, agentId, runId), undefined, params);
+    return res.data;
+  }
+
+  // ---- Machines (org-scoped) ----
+
+  async getMachines(orgId: string): Promise<Machine[]> {
+    const res = await this.request<{ data: Machine[] }>('GET', ENDPOINTS.MACHINES(orgId));
+    return res.data;
   }
 
-  async stopAgent(orgId: string, agentId: string): Promise<void> {
-    return this.request('POST', ENDPOINTS.AGENT_STOP(orgId, agentId));
+  async getMachine(orgId: string, machineId: string): Promise<Machine> {
+    return this.request('GET', ENDPOINTS.MACHINE(orgId, machineId));
   }
 
-  async getHostedStatus(orgId: string, agentId: string): Promise<HostedStatus> {
-    return this.request('GET', ENDPOINTS.AGENT_HOSTED_STATUS(orgId, agentId));
+  async deleteMachine(orgId: string, machineId: string): Promise<void> {
+    return this.request('DELETE', ENDPOINTS.MACHINE(orgId, machineId));
   }
 
-  async updateWorkspace(orgId: string, agentId: string, files: WorkspaceFiles): Promise<void> {
-    return this.request('PUT', ENDPOINTS.AGENT_WORKSPACE(orgId, agentId), files);
+  async startMachine(orgId: string, machineId: string): Promise<void> {
+    return this.request('POST', ENDPOINTS.MACHINE_START(orgId, machineId));
   }
 
-  async getAgentLogs(orgId: string, agentId: string, lines = 100): Promise<{ data: string[] }> {
-    return this.request('GET', ENDPOINTS.AGENT_LOGS(orgId, agentId), undefined, { lines });
+  async stopMachine(orgId: string, machineId: string): Promise<void> {
+    return this.request('POST', ENDPOINTS.MACHINE_STOP(orgId, machineId));
+  }
+
+  async getMachineStatus(orgId: string, machineId: string): Promise<{ state: string }> {
+    return this.request('GET', ENDPOINTS.MACHINE_STATUS(orgId, machineId));
+  }
+
+  async getMachineLogs(orgId: string, machineId: string, lines = 100): Promise<{ data: string[] }> {
+    return this.request('GET', ENDPOINTS.MACHINE_LOGS(orgId, machineId), undefined, { lines });
+  }
+
+  async updateMachineWorkspace(orgId: string, machineId: string, files: WorkspaceFiles): Promise<void> {
+    return this.request('PUT', ENDPOINTS.MACHINE_WORKSPACE(orgId, machineId), files);
   }
 
   // ---- Unread ----
@@ -373,6 +529,44 @@ export class PondClient {
     return this.request('POST', ENDPOINTS.CHAT_READ(orgId, chatId), { message_id: messageId });
   }
 
+  // ---- Platform Config ----
+
+  /**
+   * Fetch platform config for the authenticated agent.
+   * Pass currentVersion to enable conditional fetch (If-None-Match / 304).
+   * Returns null when the server responds with 304 (config unchanged).
+   */
+  async getPlatformConfig(currentVersion?: string): Promise<PlatformConfigResponse | null> {
+    const url = `${this.baseUrl}${ENDPOINTS.PLATFORM_CONFIG}`;
+    const headers: Record<string, string> = {
+      'Content-Type': 'application/json',
+    };
+    if (this.token) {
+      headers['Authorization'] = `Bearer ${this.token}`;
+    }
+    if (currentVersion !== undefined) {
+      headers['If-None-Match'] = currentVersion;
+    }
+
+    const res = await fetch(url, {
+      method: 'GET',
+      headers,
+      signal: AbortSignal.timeout(15_000),
+    });
+
+    if (res.status === 304) return null;
+
+    if (!res.ok) {
+      const errorBody = await res.json().catch(() => ({}));
+      const errorObj = errorBody?.error && typeof errorBody.error === 'object' ? errorBody.error as { message?: string; code?: string } : undefined;
+      const errMsg = errorObj?.message ?? (typeof errorBody?.error === 'string' ? errorBody.error : undefined);
+      const errCode = errorObj?.code ?? (typeof errorBody?.code === 'string' ? errorBody.code : undefined);
+      throw new ApiError(res.status, errMsg ?? res.statusText, errCode);
+    }
+
+    return res.json() as Promise<PlatformConfigResponse>;
+  }
+
   // ---- Tasks (org-scoped) ----
 
   async createTask(orgId: string, data: CreateTaskRequest): Promise<Task> {
@@ -384,6 +578,7 @@ export class PondClient {
     priority?: string;
     assignee_id?: string;
     parent_id?: string;
+    project_id?: string;
     limit?: number;
     cursor?: string;
     sort?: string;
@@ -421,6 +616,61 @@ export class PondClient {
   async deleteTaskRelation(orgId: string, taskId: string, relationId: string): Promise<void> {
     return this.request('DELETE', ENDPOINTS.TASK_RELATION(orgId, taskId, relationId));
   }
+
+  // ---- Task Comments ----
+
+  async getTaskComments(orgId: string, taskId: string, params?: {
+    limit?: number; cursor?: string; order?: string;
+  }): Promise<PaginatedResponse<TaskComment>> {
+    return this.request('GET', ENDPOINTS.TASK_COMMENTS(orgId, taskId), undefined, params);
+  }
+
+  async getTaskComment(orgId: string, taskId: string, commentId: string): Promise<TaskComment> {
+    return this.request('GET', ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId));
+  }
+
+  async createTaskComment(orgId: string, taskId: string, data: CreateTaskCommentRequest): Promise<TaskComment> {
+    return this.request('POST', ENDPOINTS.TASK_COMMENTS(orgId, taskId), data);
+  }
+
+  async updateTaskComment(orgId: string, taskId: string, commentId: string, data: UpdateTaskCommentRequest): Promise<TaskComment> {
+    return this.request('PATCH', ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId), data);
+  }
+
+  async deleteTaskComment(orgId: string, taskId: string, commentId: string): Promise<void> {
+    return this.request('DELETE', ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId));
+  }
+
+  // ---- Task Activities ----
+
+  async getTaskActivities(orgId: string, taskId: string, params?: {
+    limit?: number; cursor?: string;
+  }): Promise<PaginatedResponse<TaskActivity>> {
+    return this.request('GET', ENDPOINTS.TASK_ACTIVITIES(orgId, taskId), undefined, params);
+  }
+
+  // ---- Projects (org-scoped) ----
+
+  async createProject(orgId: string, data: CreateProjectRequest): Promise<Project> {
+    return this.request('POST', ENDPOINTS.PROJECTS(orgId), data);
+  }
+
+  async getProjects(orgId: string): Promise<Project[]> {
+    const res = await this.request<{ data: Project[] }>('GET', ENDPOINTS.PROJECTS(orgId));
+    return res.data;
+  }
+
+  async getProject(orgId: string, projectId: string): Promise<Project> {
+    return this.request('GET', ENDPOINTS.PROJECT(orgId, projectId));
+  }
+
+  async updateProject(orgId: string, projectId: string, data: UpdateProjectRequest): Promise<Project> {
+    return this.request('PATCH', ENDPOINTS.PROJECT(orgId, projectId), data);
+  }
+
+  async deleteProject(orgId: string, projectId: string): Promise<void> {
+    return this.request('DELETE', ENDPOINTS.PROJECT(orgId, projectId));
+  }
 }
 
 export class ApiError extends Error {

package/src/constants.ts

@@ -43,9 +43,10 @@ export const ENDPOINTS = {
   MESSAGE_PATCHES: (id: string) => `${API_BASE}/messages/${id}/patches`,
   MESSAGE_REPLIES: (id: string) => `${API_BASE}/messages/${id}/replies`,
 
-  // Upload (global)
-  UPLOAD_PRESIGN: `${API_BASE}/upload/presign`,
-  UPLOAD_COMPLETE: `${API_BASE}/upload/complete`,
+  // Upload (org-scoped)
+  UPLOAD_PRESIGN: (orgId: string) => `${API_BASE}/orgs/${orgId}/upload/presign`,
+  UPLOAD_COMPLETE: (orgId: string) => `${API_BASE}/orgs/${orgId}/upload/complete`,
+  FILE: (id: string) => `${API_BASE}/files/${id}`,
 
   // Approvals (global)
   APPROVAL_DECIDE: (id: string) => `${API_BASE}/approvals/${id}/decide`,
@@ -62,16 +63,26 @@ export const ENDPOINTS = {
     `${API_BASE}/orgs/${orgId}/agents/${agentId}/activity`,
   AGENT_MONITOR: (orgId: string, agentId: string) =>
     `${API_BASE}/orgs/${orgId}/agents/${agentId}/monitor`,
-  AGENT_START: (orgId: string, agentId: string) =>
-    `${API_BASE}/orgs/${orgId}/agents/${agentId}/start`,
-  AGENT_STOP: (orgId: string, agentId: string) =>
-    `${API_BASE}/orgs/${orgId}/agents/${agentId}/stop`,
-  AGENT_HOSTED_STATUS: (orgId: string, agentId: string) =>
-    `${API_BASE}/orgs/${orgId}/agents/${agentId}/hosted-status`,
-  AGENT_WORKSPACE: (orgId: string, agentId: string) =>
-    `${API_BASE}/orgs/${orgId}/agents/${agentId}/workspace`,
-  AGENT_LOGS: (orgId: string, agentId: string) =>
-    `${API_BASE}/orgs/${orgId}/agents/${agentId}/logs`,
+  AGENT_RUNS: (orgId: string, agentId: string) =>
+    `${API_BASE}/orgs/${orgId}/agents/${agentId}/runs`,
+  AGENT_RUN: (orgId: string, agentId: string, runId: string) =>
+    `${API_BASE}/orgs/${orgId}/agents/${agentId}/runs/${runId}`,
+  AGENT_RUN_STEPS: (orgId: string, agentId: string, runId: string) =>
+    `${API_BASE}/orgs/${orgId}/agents/${agentId}/runs/${runId}/steps`,
+  // Machines (org-scoped)
+  MACHINES: (orgId: string) => `${API_BASE}/orgs/${orgId}/machines`,
+  MACHINE: (orgId: string, machineId: string) =>
+    `${API_BASE}/orgs/${orgId}/machines/${machineId}`,
+  MACHINE_START: (orgId: string, machineId: string) =>
+    `${API_BASE}/orgs/${orgId}/machines/${machineId}/start`,
+  MACHINE_STOP: (orgId: string, machineId: string) =>
+    `${API_BASE}/orgs/${orgId}/machines/${machineId}/stop`,
+  MACHINE_STATUS: (orgId: string, machineId: string) =>
+    `${API_BASE}/orgs/${orgId}/machines/${machineId}/status`,
+  MACHINE_LOGS: (orgId: string, machineId: string) =>
+    `${API_BASE}/orgs/${orgId}/machines/${machineId}/logs`,
+  MACHINE_WORKSPACE: (orgId: string, machineId: string) =>
+    `${API_BASE}/orgs/${orgId}/machines/${machineId}/workspace`,
 
   // Tasks (org-scoped)
   TASKS: (orgId: string) => `${API_BASE}/orgs/${orgId}/tasks`,
@@ -82,12 +93,38 @@ export const ENDPOINTS = {
     `${API_BASE}/orgs/${orgId}/tasks/${taskId}/relations`,
   TASK_RELATION: (orgId: string, taskId: string, relId: string) =>
     `${API_BASE}/orgs/${orgId}/tasks/${taskId}/relations/${relId}`,
+  TASK_COMMENTS: (orgId: string, taskId: string) =>
+    `${API_BASE}/orgs/${orgId}/tasks/${taskId}/comments`,
+  TASK_COMMENT: (orgId: string, taskId: string, commentId: string) =>
+    `${API_BASE}/orgs/${orgId}/tasks/${taskId}/comments/${commentId}`,
+  TASK_ACTIVITIES: (orgId: string, taskId: string) =>
+    `${API_BASE}/orgs/${orgId}/tasks/${taskId}/activities`,
+
+  // Projects (org-scoped)
+  PROJECTS: (orgId: string) => `${API_BASE}/orgs/${orgId}/projects`,
+  PROJECT: (orgId: string, projectId: string) => `${API_BASE}/orgs/${orgId}/projects/${projectId}`,
+
+  // Invitations (org-scoped, admin)
+  ORG_INVITATIONS: (orgId: string) => `${API_BASE}/orgs/${orgId}/invitations`,
+  ORG_INVITATION: (orgId: string, invId: string) =>
+    `${API_BASE}/orgs/${orgId}/invitations/${invId}`,
+  ORG_INVITATION_RESEND: (orgId: string, invId: string) =>
+    `${API_BASE}/orgs/${orgId}/invitations/${invId}/resend`,
+
+  // Invitations (invitee)
+  MY_INVITATIONS: `${API_BASE}/invitations/pending`,
+  INVITATION_ACCEPT: (id: string) => `${API_BASE}/invitations/${id}/accept`,
+  INVITATION_DECLINE: (id: string) => `${API_BASE}/invitations/${id}/decline`,
+  INVITATION_BY_TOKEN: (token: string) => `${API_BASE}/invitations/by-token/${token}`,
 
   // Unread
   UNREAD: `${API_BASE}/me/unread`,
   CHAT_READ: (orgId: string, chatId: string) =>
     `${API_BASE}/orgs/${orgId}/chats/${chatId}/read`,
 
+  // Platform config (agent-scoped, not org-scoped)
+  PLATFORM_CONFIG: `${API_BASE}/agents/platform-config`,
+
 } as const;
 
 // WebSocket event types
@@ -110,10 +147,24 @@ export const WS_EVENTS = {
   MESSAGE_DELETE: 'message.delete',
   TYPING_UPDATE: 'typing.update',
   CHAT_UPDATE: 'chat.update',
-  APPROVAL_UPDATE: 'approval.update',
+  APPROVAL_UPDATE: 'approval.update', // deprecated
+  CARD_UPDATE: 'card.update',
   RECOVERY_OVERFLOW: 'recovery.overflow',
   MEMBERSHIP_CHANGED: 'membership.changed',
   TASK_CREATED: 'task.created',
   TASK_UPDATED: 'task.updated',
   TASK_DELETED: 'task.deleted',
+  TASK_COMMENT_CREATED: 'task.comment.created',
+  TASK_COMMENT_UPDATED: 'task.comment.updated',
+  TASK_COMMENT_DELETED: 'task.comment.deleted',
+  PROJECT_CREATED: 'project.created',
+  PROJECT_UPDATED: 'project.updated',
+  PROJECT_DELETED: 'project.deleted',
+  AGENT_RUN_NEW: 'agent_run.new',
+  AGENT_RUN_UPDATE: 'agent_run.update',
+  AGENT_STEP_NEW: 'agent_step.new',
+  INVITATION_NEW: 'invitation.new',
+  INVITATION_ACCEPTED: 'invitation.accepted',
+  INVITATION_DECLINED: 'invitation.declined',
+  AGENT_CONFIG_UPDATE: 'agent_config.update',
 } as const;

package/src/index.ts

@@ -3,4 +3,4 @@ export * from './constants.js';
 export { PondClient, ApiError } from './client.js';
 export type { PondClientOptions } from './client.js';
 export { PondWs } from './ws.js';
-export type { PondWsOptions, WsConnectionState, WsEventType, WsEventHandler } from './ws.js';
+export type { PondWsOptions, WsConnectionState, WsEventType, WsEventHandler, WsClientEventMap } from './ws.js';