@pouchy_ai/admin-sdk 0.2.0 → 0.4.0

package/CHANGELOG.md

@@ -2,6 +2,35 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.4.0 — 2026-07-13
+
+Full skill-lifecycle parity — the two knobs the dashboard grew (a runaway
+guard + the prose→tools upgrade) are now typed on the client:
+
+- **`setSkillDailyCap(slug, maxCallsPerDay)`** — the opt-in daily call ceiling
+  (`PATCH /v1/admin/skills/{slug}` with `{ maxCallsPerDay }`, 1..20000, null to
+  clear): max HTTP calls per rolling 24h for a skill, a runaway guard for
+  autonomous outbound the per-minute cap doesn't cover. Returns `reprovisioned`.
+- **`compileSkill(slug)`** — compile a docs-only skill's prose into declared
+  `http` tools (`POST /v1/admin/skills/{slug}/compile`): a one-shot LLM proposes
+  tools bound to the skill's allowlist, re-installed (reversible via rollback).
+  Returns `{ skill, toolNames, warnings }`.
+- (Also fixes the `ADMIN_SDK_VERSION` constant, which had drifted to `0.2.0`.)
+
+## 0.3.0 — 2026-07-13
+
+Skill-config parity — a docs-only skill (no `tools:` block) can now be
+installed AND armed entirely via the API, no dashboard step:
+
+- **`grantSkill(slug, { freeHttp, grantedDomains? })`** — the free-HTTP grant
+  (`PATCH /v1/admin/skills/{slug}`): let the agent drive a skill's API from its
+  prose body via `http_request`, bounded to the manifest's `allowed_domains` ∪
+  `grantedDomains`. The new def is re-pushed to running instances; the result's
+  `reprovisioned` reports how many picked it up. Full flow: `installSkill` →
+  `updateAgent(id, { skills: [...] })` → `grantSkill`.
+- **`setSkillRate(slug, ratePerMin)`** — typed convenience over `updateSkill`
+  for the per-minute call budget (1..120, or null to restore the default).
+
 ## 0.2.0 — 2026-07-11
 
 Provisioning-parity release (driven by integrator feedback — programmatic

package/README.md

@@ -40,6 +40,19 @@ console.log(key.token); // shown ONCE
 // Read this month's usage
 const usage = await admin.getUsage();
 console.log(usage.mau, '/', usage.mauLimit, 'MAU');
+
+// Equip an agent with ANY skill — including a docs-only skill.md that has no
+// `tools:` block — entirely via the API:
+const { skill } = await admin.installSkill({
+  md: '---\nname: echo-probe\nallowed_domains:\n  - postman-echo.com\n---\nGET https://postman-echo.com/get echoes the request.'
+});
+await admin.updateAgent(agent.agentId, { skills: [skill.slug] }); // attach to the agent
+const armed = await admin.grantSkill(skill.slug, {
+  freeHttp: true,
+  grantedDomains: ['postman-echo.com'] // unioned with the manifest's allowed_domains
+});
+console.log(`armed — ${armed.reprovisioned} running instance(s) updated`);
+// The agent can now drive the API from the skill's prose via http_request.
 ```
 
 ## Options
@@ -74,7 +87,7 @@ try {
 | Secret keys | `listKeys` · `createKey` · `revokeKey` · `rotateKey` (24 h grace) |
 | End users | `listUsers` · `setUserSuspended` · `deleteUser` · `getUserWallet` · `getUserTraces` · `importUsers` · `exportUser` · `getUserSessions` · `getUserTurns` |
 | Knowledge | `listKnowledge` · `ingestKnowledge` · `deleteKnowledge` |
-| Skills | `listSkills` · `installSkill` · `updateSkill` · `uninstallSkill` |
+| Skills | `listSkills` · `installSkill` · `updateSkill` · `setSkillRate` · `setSkillDailyCap` · `grantSkill` (free-HTTP) · `compileSkill` (prose→tools) · `uninstallSkill` |
 | Credentials | `listCredentials` · `putCredentials` · `deleteCredentials` |
 | Channels | `listChannels` · `createChannel` · `getChannel` · `updateChannel` · `deleteChannel` |
 | Schedules | `listSchedules` · `createSchedule` · `getSchedule` · `updateSchedule` · `deleteSchedule` |

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export declare const ADMIN_SDK_VERSION = "0.2.0";
+export declare const ADMIN_SDK_VERSION = "0.4.0";
 export declare const DEFAULT_BASE_URL = "https://pouchy.ai/v1/admin";
 export interface AdminClientOptions {
     /** A project Admin key (`pchy_admin_…`) from the dashboard Admin Keys page. */
@@ -233,6 +233,43 @@ export interface AdminClient {
             slug: string;
         };
     }>;
+    /** Set a skill's per-minute call budget (1..120; null restores the default). */
+    setSkillRate(slug: string, ratePerMin: number | null): Promise<{
+        ratePerMin: number | null;
+    }>;
+    /** Set a skill's opt-in daily call ceiling — max HTTP calls per rolling 24h
+     *  (1..20000; null clears it, leaving only the per-minute cap). A runaway
+     *  guard for autonomous outbound. Re-pushes the def to running instances. */
+    setSkillDailyCap(slug: string, maxCallsPerDay: number | null): Promise<{
+        maxCallsPerDay: number | null;
+        reprovisioned: number;
+    }>;
+    /** Compile a docs-only skill's prose (curl snippets / endpoint tables) into
+     *  declared `http` tools via a one-shot LLM, then re-install the result
+     *  (safety gate + version archive → reversible via rollback). Each tool is
+     *  bound to the skill's allowlist; `warnings` lists any dropped by a bad host
+     *  or shape. Turns a free-HTTP skill into structured `run_skill` tools. */
+    compileSkill(slug: string): Promise<{
+        skill: {
+            slug: string;
+        };
+        toolNames: string[];
+        warnings: string[];
+    }>;
+    /** Free-HTTP grant (universal import): let the agent drive this skill's API
+     *  from its prose body via `http_request`, bounded to the manifest's
+     *  `allowed_domains` ∪ `grantedDomains`. This is how a docs-only skill
+     *  (no `tools:` block) becomes runnable — install it, attach it to an agent
+     *  (`updateAgent(id, { skills: [...] })`), then grant it here. The new def is
+     *  re-pushed to running instances; `reprovisioned` is how many were updated. */
+    grantSkill(slug: string, grant: {
+        freeHttp: boolean;
+        grantedDomains?: string[];
+    }): Promise<{
+        freeHttp: boolean;
+        grantedDomains: string[];
+        reprovisioned: number;
+    }>;
     uninstallSkill(slug: string): Promise<{
         deleted: boolean;
     }>;

package/dist/index.js

@@ -8,7 +8,7 @@
 //   import { createAdminClient } from '@pouchy_ai/admin-sdk';
 //   const admin = createAdminClient({ adminKey: process.env.POUCHY_ADMIN_KEY! });
 //   const { agents } = await admin.listAgents();
-export const ADMIN_SDK_VERSION = '0.2.0';
+export const ADMIN_SDK_VERSION = '0.4.0';
 export const DEFAULT_BASE_URL = 'https://pouchy.ai/v1/admin';
 /** Thrown on any non-2xx response. `status` is the HTTP status; `message` is the
  *  server's `error` string when present. */
@@ -74,6 +74,13 @@ export function createAdminClient(opts) {
         listSkills: () => request('GET', '/skills'),
         installSkill: (input) => request('POST', '/skills', input),
         updateSkill: (slug, patch) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, patch),
+        setSkillRate: (slug, ratePerMin) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { ratePerMin }),
+        setSkillDailyCap: (slug, maxCallsPerDay) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { maxCallsPerDay }),
+        compileSkill: (slug) => request('POST', `/skills/${encodeURIComponent(slug)}/compile`, {}),
+        grantSkill: (slug, grant) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, {
+            freeHttp: grant.freeHttp,
+            grantedDomains: grant.grantedDomains ?? []
+        }),
         uninstallSkill: (slug) => request('DELETE', `/skills/${encodeURIComponent(slug)}`),
         listCredentials: () => request('GET', '/credentials'),
         putCredentials: (input) => request('POST', '/credentials', input),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pouchy_ai/admin-sdk",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Typed TypeScript client for the Pouchy Admin API — manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",