@pouchy_ai/admin-sdk 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.3.0 — 2026-07-13
+
+Skill-config parity — a docs-only skill (no `tools:` block) can now be
+installed AND armed entirely via the API, no dashboard step:
+
+- **`grantSkill(slug, { freeHttp, grantedDomains? })`** — the free-HTTP grant
+  (`PATCH /v1/admin/skills/{slug}`): let the agent drive a skill's API from its
+  prose body via `http_request`, bounded to the manifest's `allowed_domains` ∪
+  `grantedDomains`. The new def is re-pushed to running instances; the result's
+  `reprovisioned` reports how many picked it up. Full flow: `installSkill` →
+  `updateAgent(id, { skills: [...] })` → `grantSkill`.
+- **`setSkillRate(slug, ratePerMin)`** — typed convenience over `updateSkill`
+  for the per-minute call budget (1..120, or null to restore the default).
+
 ## 0.2.0 — 2026-07-11
 
 Provisioning-parity release (driven by integrator feedback — programmatic

package/README.md

@@ -40,6 +40,19 @@ console.log(key.token); // shown ONCE
 // Read this month's usage
 const usage = await admin.getUsage();
 console.log(usage.mau, '/', usage.mauLimit, 'MAU');
+
+// Equip an agent with ANY skill — including a docs-only skill.md that has no
+// `tools:` block — entirely via the API:
+const { skill } = await admin.installSkill({
+  md: '---\nname: echo-probe\nallowed_domains:\n  - postman-echo.com\n---\nGET https://postman-echo.com/get echoes the request.'
+});
+await admin.updateAgent(agent.agentId, { skills: [skill.slug] }); // attach to the agent
+const armed = await admin.grantSkill(skill.slug, {
+  freeHttp: true,
+  grantedDomains: ['postman-echo.com'] // unioned with the manifest's allowed_domains
+});
+console.log(`armed — ${armed.reprovisioned} running instance(s) updated`);
+// The agent can now drive the API from the skill's prose via http_request.
 ```
 
 ## Options
@@ -74,7 +87,7 @@ try {
 | Secret keys | `listKeys` · `createKey` · `revokeKey` · `rotateKey` (24 h grace) |
 | End users | `listUsers` · `setUserSuspended` · `deleteUser` · `getUserWallet` · `getUserTraces` · `importUsers` · `exportUser` · `getUserSessions` · `getUserTurns` |
 | Knowledge | `listKnowledge` · `ingestKnowledge` · `deleteKnowledge` |
-| Skills | `listSkills` · `installSkill` · `updateSkill` · `uninstallSkill` |
+| Skills | `listSkills` · `installSkill` · `updateSkill` · `setSkillRate` · `grantSkill` (free-HTTP) · `uninstallSkill` |
 | Credentials | `listCredentials` · `putCredentials` · `deleteCredentials` |
 | Channels | `listChannels` · `createChannel` · `getChannel` · `updateChannel` · `deleteChannel` |
 | Schedules | `listSchedules` · `createSchedule` · `getSchedule` · `updateSchedule` · `deleteSchedule` |

package/dist/index.d.ts

@@ -233,6 +233,24 @@ export interface AdminClient {
             slug: string;
         };
     }>;
+    /** Set a skill's per-minute call budget (1..120; null restores the default). */
+    setSkillRate(slug: string, ratePerMin: number | null): Promise<{
+        ratePerMin: number | null;
+    }>;
+    /** Free-HTTP grant (universal import): let the agent drive this skill's API
+     *  from its prose body via `http_request`, bounded to the manifest's
+     *  `allowed_domains` ∪ `grantedDomains`. This is how a docs-only skill
+     *  (no `tools:` block) becomes runnable — install it, attach it to an agent
+     *  (`updateAgent(id, { skills: [...] })`), then grant it here. The new def is
+     *  re-pushed to running instances; `reprovisioned` is how many were updated. */
+    grantSkill(slug: string, grant: {
+        freeHttp: boolean;
+        grantedDomains?: string[];
+    }): Promise<{
+        freeHttp: boolean;
+        grantedDomains: string[];
+        reprovisioned: number;
+    }>;
     uninstallSkill(slug: string): Promise<{
         deleted: boolean;
     }>;

package/dist/index.js

@@ -74,6 +74,11 @@ export function createAdminClient(opts) {
         listSkills: () => request('GET', '/skills'),
         installSkill: (input) => request('POST', '/skills', input),
         updateSkill: (slug, patch) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, patch),
+        setSkillRate: (slug, ratePerMin) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { ratePerMin }),
+        grantSkill: (slug, grant) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, {
+            freeHttp: grant.freeHttp,
+            grantedDomains: grant.grantedDomains ?? []
+        }),
         uninstallSkill: (slug) => request('DELETE', `/skills/${encodeURIComponent(slug)}`),
         listCredentials: () => request('GET', '/credentials'),
         putCredentials: (input) => request('POST', '/credentials', input),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pouchy_ai/admin-sdk",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Typed TypeScript client for the Pouchy Admin API — manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",