@poncho-ai/sdk 1.7.1 → 1.8.1

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @poncho-ai/sdk@1.7.1 build /home/runner/work/poncho-ai/poncho-ai/packages/sdk
+> @poncho-ai/sdk@1.8.1 build /home/runner/work/poncho-ai/poncho-ai/packages/sdk
 > tsup src/index.ts --format esm --dts
 
 CLI Building entry: src/index.ts
@@ -8,7 +8,7 @@
 CLI Target: es2022
 ESM Build start
 ESM dist/index.js 12.46 KB
-ESM ⚡️ Build success in 19ms
+ESM ⚡️ Build success in 16ms
 DTS Build start
-DTS ⚡️ Build success in 1298ms
-DTS dist/index.d.ts 23.88 KB
+DTS ⚡️ Build success in 1193ms
+DTS dist/index.d.ts 24.92 KB

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @poncho-ai/sdk
 
+## 1.8.1
+
+### Patch Changes
+
+- Add VfsAccess interface and expand ToolContext with optional `vfs` field for tenant-scoped virtual filesystem access in tool handlers.
+
+## 1.8.0
+
+### Minor Changes
+
+- [`83d3c5f`](https://github.com/cesr/poncho-ai/commit/83d3c5f841fe84965d1f9fec6dfc5d8832e4489a) Thanks [@cesr](https://github.com/cesr)! - feat: add multi-tenancy with JWT-based tenant scoping
+
+  Deploy one agent, serve many tenants with fully isolated conversations, memory, reminders, and secrets. Tenancy activates automatically when a valid JWT is received — no config changes needed.
+  - **Auth**: `createTenantToken()` in client SDK, `poncho auth create-token` CLI, or any HS256 JWT library.
+  - **Isolation**: conversations, memory, reminders, and todos scoped per tenant.
+  - **Per-tenant secrets**: encrypted secret overrides for MCP auth tokens, manageable via CLI (`poncho secrets`), API, and web UI settings panel.
+  - **MCP**: per-tenant token resolution with deferred discovery for servers without a default env var.
+  - **Web UI**: `?token=` tenant access, settings cog for secret management, dark mode support.
+  - **Backward compatible**: existing single-user deployments work unchanged.
+
 ## 1.7.1
 
 ### Patch Changes

package/dist/index.d.ts

@@ -570,6 +570,27 @@ interface Message {
 }
 /** Extract the text content from a message, regardless of content format. */
 declare const getTextContent: (message: Message) => string;
+/** Virtual filesystem scoped to the current tenant. Available when VFS is enabled. */
+interface VfsAccess {
+    readFile(path: string): Promise<Uint8Array>;
+    readText(path: string): Promise<string>;
+    writeFile(path: string, content: Uint8Array, mimeType?: string): Promise<void>;
+    writeText(path: string, content: string): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<{
+        size: number;
+        isDirectory: boolean;
+        mimeType?: string;
+        updatedAt: number;
+    }>;
+    readdir(path: string): Promise<string[]>;
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    rm(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+}
 interface ToolContext {
     runId: string;
     agentId: string;
@@ -578,6 +599,10 @@ interface ToolContext {
     parameters: Record<string, unknown>;
     abortSignal?: AbortSignal;
     conversationId?: string;
+    /** The tenant ID when running in multi-tenant mode. */
+    tenantId?: string;
+    /** Virtual filesystem scoped to the current tenant. Available when VFS is enabled. */
+    vfs?: VfsAccess;
 }
 type ToolHandler<TInput extends Record<string, unknown>, TOutput> = (input: TInput, context: ToolContext) => Promise<TOutput> | TOutput;
 interface ToolDefinition<TInput extends Record<string, unknown> = Record<string, unknown>, TOutput = unknown> {
@@ -608,6 +633,8 @@ interface RunInput {
     conversationId?: string;
     /** When true, ignores PONCHO_MAX_DURATION soft deadline (used for background subagent runs). */
     disableSoftDeadline?: boolean;
+    /** Scope this run to a specific tenant. */
+    tenantId?: string;
 }
 interface TokenUsage {
     input: number;
@@ -681,6 +708,7 @@ type AgentEvent = {
 } | {
     type: "tool:completed";
     tool: string;
+    input?: unknown;
     output: unknown;
     duration: number;
     outputTokenEstimate?: number;
@@ -767,4 +795,4 @@ type AgentEvent = {
     reason: string;
 };
 
-export { type AgentEvent, type AgentFailure, type ContentPart, FEATURE_DOMAIN_ORDER, type FeatureDomain, type FileContentPart, type FileInput, type JsonSchema, type Message, ONBOARDING_FIELDS, type OnboardingField, type OnboardingFieldCondition, type OnboardingFieldKind, type OnboardingFieldTarget, type OnboardingOption, type OnboardingScope, type Role, type RunInput, type RunResult, type TextContentPart, type TokenUsage, type ToolContext, type ToolDefinition, type ToolHandler, defineTool, fieldsForScope, getTextContent };
+export { type AgentEvent, type AgentFailure, type ContentPart, FEATURE_DOMAIN_ORDER, type FeatureDomain, type FileContentPart, type FileInput, type JsonSchema, type Message, ONBOARDING_FIELDS, type OnboardingField, type OnboardingFieldCondition, type OnboardingFieldKind, type OnboardingFieldTarget, type OnboardingOption, type OnboardingScope, type Role, type RunInput, type RunResult, type TextContentPart, type TokenUsage, type ToolContext, type ToolDefinition, type ToolHandler, type VfsAccess, defineTool, fieldsForScope, getTextContent };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poncho-ai/sdk",
-  "version": "1.7.1",
+  "version": "1.8.1",
   "description": "Core types and utilities for building Poncho skills",
   "repository": {
     "type": "git",

package/src/index.ts

@@ -50,6 +50,24 @@ export const getTextContent = (message: Message): string => {
     .join("");
 };
 
+/** Virtual filesystem scoped to the current tenant. Available when VFS is enabled. */
+export interface VfsAccess {
+  readFile(path: string): Promise<Uint8Array>;
+  readText(path: string): Promise<string>;
+  writeFile(path: string, content: Uint8Array, mimeType?: string): Promise<void>;
+  writeText(path: string, content: string): Promise<void>;
+  exists(path: string): Promise<boolean>;
+  stat(path: string): Promise<{
+    size: number;
+    isDirectory: boolean;
+    mimeType?: string;
+    updatedAt: number;
+  }>;
+  readdir(path: string): Promise<string[]>;
+  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;
+  rm(path: string, options?: { recursive?: boolean }): Promise<void>;
+}
+
 export interface ToolContext {
   runId: string;
   agentId: string;
@@ -58,6 +76,10 @@ export interface ToolContext {
   parameters: Record<string, unknown>;
   abortSignal?: AbortSignal;
   conversationId?: string;
+  /** The tenant ID when running in multi-tenant mode. */
+  tenantId?: string;
+  /** Virtual filesystem scoped to the current tenant. Available when VFS is enabled. */
+  vfs?: VfsAccess;
 }
 
 export type ToolHandler<TInput extends Record<string, unknown>, TOutput> = (
@@ -105,6 +127,8 @@ export interface RunInput {
   conversationId?: string;
   /** When true, ignores PONCHO_MAX_DURATION soft deadline (used for background subagent runs). */
   disableSoftDeadline?: boolean;
+  /** Scope this run to a specific tenant. */
+  tenantId?: string;
 }
 
 export interface TokenUsage {
@@ -150,7 +174,7 @@ export type AgentEvent =
   | { type: "model:response"; usage: TokenUsage }
   | { type: "tool:generating"; tool: string; toolCallId: string }
   | { type: "tool:started"; tool: string; input: unknown }
-  | { type: "tool:completed"; tool: string; output: unknown; duration: number; outputTokenEstimate?: number }
+  | { type: "tool:completed"; tool: string; input?: unknown; output: unknown; duration: number; outputTokenEstimate?: number }
   | { type: "tool:error"; tool: string; error: string; recoverable: boolean }
   | {
       type: "tool:approval:required";