@pouchy_ai/admin-sdk 0.16.0 → 0.16.1

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.16.1 — 2026-08-06
+
+Documentation only — no type, signature or runtime change. Two doc comments
+were describing a contract the server does not have.
+
+- **`updateSkill` said the response echoes "the knob(s) you changed".** It is
+  one knob per call. `PATCH /skills/{slug}` disambiguates by payload, so a
+  patch naming two groups — `{ ratePerMin, maxCallsPerDay }` — used to perform
+  whichever the server checked first and silently drop the rest under a `200`.
+  The plural in this package's own doc invited exactly that call. The server
+  now refuses an ambiguous body with a `400` naming the groups it found, and
+  the doc states the rule. `{ freeHttp, grantedDomains }` remains ONE knob (a
+  single write), not two.
+
+  The typed conveniences (`setSkillRate`, `setSkillDailyCap`, `grantSkill`)
+  were never affected — each sends exactly one knob by construction. Only a
+  hand-built `updateSkill` patch could reach it.
+
+- **`grantSkill` is a full REPLACE and did not say so.** `grantedDomains` is
+  optional in the signature, which reads as "leave it alone"; it is sent as
+  `[]` when omitted, clearing the extra allowlist. Pass the domains you want to
+  end up with on every call. (The manifest's own `allowed_domains` is a
+  separate list and is never touched by this call.)
+
 ## 0.16.0 — 2026-08-06
 
 - **Catches the package up to a server change that already shipped.**

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export declare const ADMIN_SDK_VERSION = "0.16.0";
+export declare const ADMIN_SDK_VERSION = "0.16.1";
 export declare const DEFAULT_BASE_URL = "https://pouchy.ai/v1/admin";
 /** Deadline for the routes whose server handler declares `maxDuration: 300` —
  *  the server's own ceiling plus headroom, so a client abort can only ever mean
@@ -671,11 +671,15 @@ export interface AdminClient {
             version: number;
         };
     }>;
-    /** Generic PATCH of a skill's knobs. The response echoes the knob(s) you
-     *  changed plus the re-push outcome every knob now carries
-     *  (`reprovisioned`, `truncated`) — prefer the typed conveniences
-     *  (setSkillRate / setSkillDailyCap / grantSkill) for a precise return
-     *  type. */
+    /** Generic PATCH of a skill's knobs. **Exactly ONE knob per call** — the
+     *  endpoint disambiguates by payload, so a patch naming two (say
+     *  `{ ratePerMin, maxCallsPerDay }`) is refused with 400 rather than
+     *  half-applied. `{ freeHttp, grantedDomains }` is one knob, not two: the
+     *  grant is a single write. The response echoes the knob you changed plus
+     *  the re-push outcome every knob carries (`reprovisioned`, `truncated`).
+     *  Prefer the typed conveniences (setSkillRate / setSkillDailyCap /
+     *  grantSkill) — they are one knob each by construction and give a precise
+     *  return type. */
     updateSkill(slug: string, patch: Record<string, unknown>): Promise<Record<string, unknown>>;
     /** Set a skill's per-minute call budget (1..120; null restores the default).
      *  Re-pushes the def to running instances — the limiter reads the budget off
@@ -708,7 +712,12 @@ export interface AdminClient {
      *  `allowed_domains` ∪ `grantedDomains`. This is how a docs-only skill
      *  (no `tools:` block) becomes runnable — install it, attach it to an agent
      *  (`updateAgent(id, { skills: [...] })`), then grant it here. The new def is
-     *  re-pushed to running instances; `reprovisioned` is how many were updated. */
+     *  re-pushed to running instances; `reprovisioned` is how many were updated.
+     *
+     *  This is a full REPLACE of the grant, not a merge: omitting
+     *  `grantedDomains` sends `[]` and clears the extra allowlist (the manifest's
+     *  own `allowed_domains` is unaffected). Pass the domains you want to end up
+     *  with on every call. */
     grantSkill(slug: string, grant: {
         freeHttp: boolean;
         grantedDomains?: string[];

package/dist/index.js

@@ -8,7 +8,7 @@
 //   import { createAdminClient } from '@pouchy_ai/admin-sdk';
 //   const admin = createAdminClient({ adminKey: process.env.POUCHY_ADMIN_KEY! });
 //   const { agents } = await admin.listAgents();
-export const ADMIN_SDK_VERSION = '0.16.0';
+export const ADMIN_SDK_VERSION = '0.16.1';
 export const DEFAULT_BASE_URL = 'https://pouchy.ai/v1/admin';
 /** Default per-request timeout (ms). A hung upstream otherwise never rejects. */
 const DEFAULT_TIMEOUT_MS = 30_000;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pouchy_ai/admin-sdk",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Typed TypeScript client for the Pouchy Admin API \u2014 manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",