@pouchy_ai/admin-sdk 0.27.1 → 0.29.0

package/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.29.0 — 2026-08-31
+
+- **`setSkillAutoRunTools(slug, toolNames)` — the per-tool confirm exemptions
+  (免确认工具) the Admin API could not reach.** Admin API 1.12.0. The knob
+  existed on the owner plane and in the dashboard since 2026-08 and was never
+  added here, so a headless provisioning flow could install a skill, rate-limit
+  it, grant its domains and attach it to an agent — and then answer nothing.
+  For MCP skills that is not an edge case: `mcpRecord` hard-codes
+  `platformSafe: false`, so every `run_skill` raises a confirm, and a platform
+  instance has no human who could ever approve one. This was the only route out.
+
+  A full REPLACE, not a merge — pass the complete list each call. Names the
+  skill does not declare are dropped and echoed in `dropped`, so a typo is
+  visible rather than silently ungranted. Grant the READ tools (a storefront's
+  `search_catalog` / `get_product`); leave cart mutations and order placement
+  gated.
+
+  Opening this to a long-lived admin key was an explicit decision, not a
+  symmetry fix: the confirm being waived is not a human in the loop (on an
+  instance nobody can approve it), and the same key already grants the strictly
+  wider `freeHttp` + `grantedDomains`.
+
+## 0.28.0 — 2026-08-29
+
+- **`installSkill` / `importAgentPlugin` now type the re-push outcome.** Both
+  installs re-push the new def to running instances (a RE-install/RE-import
+  takes effect now, not on the next persona edit — server change 2026-08-29;
+  Admin API 1.11.0), and both results now carry `reprovisioned` /
+  `truncated`, same semantics as the skill-knob calls: `truncated: true`
+  means the sweep hit a cap (100 agents / 200 instances) and the remainder
+  keep the OLD def until a persona edit. `installSkill` also gains the
+  `warnings?: string[]` the server always sent (e.g. skipped OpenAPI
+  operations). Types only — no runtime change; existing destructuring keeps
+  working.
+
 ## 0.27.1 — 2026-08-28
 
 - **Docs-only, but read it if you use `encodingFormat: 'base64'`.** The 0.27.0

package/README.md

@@ -243,7 +243,8 @@ that voice, or the voice catalog is temporarily unreachable; retry),
 like the other voice planes — there is no separate platform credit rate; it is
 bounded by an input cap and the shared per-IP utility rate limit.
 
-Every skill knob (`setSkillRate`, `setSkillDailyCap`, `grantSkill`) returns
+Every skill knob (`setSkillRate`, `setSkillDailyCap`, `grantSkill`,
+`setSkillAutoRunTools`) returns
 `SkillKnobResult<T>` — the knob you set plus `reprovisioned` (instances the new
 def reached) and `truncated`. A knob only binds a running agent once the def
 reaches its instance, so `truncated: true` means the sweep hit its cap (100
@@ -436,7 +437,7 @@ Reads (`GET`) are not covered by that bucket. `retryAfter` is available from
 | Secret keys | `listKeys` · `createKey` · `revokeKey` · `rotateKey` (24 h grace) |
 | End users | `listUsers({ limit?, cursor? })` (cursor-paginated — the response's `nextCursor` feeds the next page; filter variants: `external_user_id` / `external_user_prefix`) · `setUserSuspended` · `deleteUser` · `getUserWallet` · `getUserTraces` · `importUsers` · `exportUser` · `getUserSessions` · `getUserTurns` |
 | Knowledge | `listKnowledge` · `ingestKnowledge` · `ingestKnowledgeFile` (PDF/audio/video/image) · `ingestKnowledgeUrl` (web page) · `searchKnowledge` (recall probe) · `deleteKnowledge` |
-| Skills | `listSkills` · `installSkill` · `updateSkill` · `setSkillRate` · `setSkillDailyCap` · `grantSkill` (free-HTTP) · `compileSkill` (prose→tools) · `uninstallSkill` · `importAgentPlugin` / `exportAgentPlugin` (Agent Plugins 1.0.0 interop) |
+| Skills | `listSkills` · `installSkill` · `updateSkill` · `setSkillRate` · `setSkillDailyCap` · `grantSkill` (free-HTTP) · `setSkillAutoRunTools` (免确认工具 — required to arm an MCP skill on an instance) · `compileSkill` (prose→tools) · `uninstallSkill` · `importAgentPlugin` / `exportAgentPlugin` (Agent Plugins 1.0.0 interop) |
 | Credentials | `listCredentials` · `putCredentials` · `deleteCredentials` |
 | Channels | `listChannels` · `createChannel` · `getChannel` · `updateChannel` · `deleteChannel` |
 | Schedules | `listSchedules` · `createSchedule` · `getSchedule` · `updateSchedule` · `deleteSchedule` |

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export declare const ADMIN_SDK_VERSION = "0.27.1";
+export declare const ADMIN_SDK_VERSION = "0.29.0";
 export declare const DEFAULT_BASE_URL = "https://pouchy.ai/v1/admin";
 /** Deadline for the routes whose server handler declares `maxDuration: 300` —
  *  the server's own ceiling plus headroom, so a client abort can only ever mean
@@ -813,6 +813,13 @@ export interface AdminClient {
     listSkills(): Promise<{
         skills: unknown[];
     }>;
+    /** Install (or RE-install — same slug, next version) a custom skill. The
+     *  new def is re-pushed to running instances in one bounded sweep, so a
+     *  re-import takes effect now rather than on the next persona edit; the
+     *  result carries the same `reprovisioned` / `truncated` outcome as the
+     *  skill-knob calls (`truncated: true` = the sweep hit a cap and the
+     *  remainder keep the OLD def until a persona edit — see SkillKnobResult).
+     *  `warnings` lists non-fatal drops (e.g. skipped OpenAPI operations). */
     installSkill(input: {
         md?: string;
         url?: string;
@@ -820,12 +827,13 @@ export interface AdminClient {
         openapi?: string;
         openapiUrl?: string;
         slug?: string;
-    }): Promise<{
+    }): Promise<SkillKnobResult<{
         skill: {
             slug: string;
             version: number;
         };
-    }>;
+        warnings?: string[];
+    }>>;
     /** Generic PATCH of a skill's knobs. **Exactly ONE knob per call** — the
      *  endpoint disambiguates by payload, so a patch naming two (say
      *  `{ ratePerMin, maxCallsPerDay }`) is refused with 400 rather than
@@ -880,6 +888,25 @@ export interface AdminClient {
         freeHttp: boolean;
         grantedDomains: string[];
     }>>;
+    /** Per-tool confirm exemptions (免确认工具) — the tools an INSTANCE may call
+     *  without a confirm card.
+     *
+     *  The one knob a headless flow could not reach before 0.29.0, and for MCP
+     *  skills it is not optional: `mcpRecord` hard-codes `platformSafe: false`,
+     *  so every `run_skill` raises a confirm — and a platform instance has no
+     *  human who could ever approve one (a synthetic uid has no Firebase user).
+     *  Without this the skill installs, rate-limits and attaches cleanly and then
+     *  answers nothing. Grant the READ tools (a storefront's `search_catalog` /
+     *  `get_product`) and leave anything that mutates a cart or places an order
+     *  gated.
+     *
+     *  A full REPLACE, not a merge — pass the complete list every call. Names the
+     *  skill does not declare are dropped and echoed back in `dropped`, so a typo
+     *  is visible rather than silently ungranted. */
+    setSkillAutoRunTools(slug: string, toolNames: string[]): Promise<SkillKnobResult<{
+        autoRunTools: string[];
+        dropped: string[];
+    }>>;
     uninstallSkill(slug: string): Promise<{
         deleted: boolean;
     }>;
@@ -895,13 +922,16 @@ export interface AdminClient {
      *  store credentials with `putCredentials` after install. Resolves 201
      *  when at least one component installed (`skipped`/`errors` carry the
      *  rest); a package with nothing installable rejects with a 422 naming
-     *  the first per-component reason. */
+     *  the first per-component reason. The whole installed set is re-pushed to
+     *  running instances in ONE bounded sweep (a RE-import takes effect now,
+     *  not on the next persona edit) — `reprovisioned` / `truncated` report
+     *  it, same semantics as the skill-knob calls. */
     importAgentPlugin(input: {
         files: Array<{
             path: string;
             content: string;
         }>;
-    }): Promise<{
+    }): Promise<SkillKnobResult<{
         plugin: {
             name: string;
             version?: string;
@@ -919,7 +949,7 @@ export interface AdminClient {
             component: string;
             error: string;
         }>;
-    }>;
+    }>>;
     /** Export one installed skill as a conformant Agent Plugins 1.0.0 package
      *  (file map — write it to a directory or zip it yourself). Portable face:
      *  SKILL.md instruction prose or an mcp.json streamable-http reference;

package/dist/index.js

@@ -8,7 +8,7 @@
 //   import { createAdminClient } from '@pouchy_ai/admin-sdk';
 //   const admin = createAdminClient({ adminKey: process.env.POUCHY_ADMIN_KEY! });
 //   const { agents } = await admin.listAgents();
-export const ADMIN_SDK_VERSION = '0.27.1';
+export const ADMIN_SDK_VERSION = '0.29.0';
 export const DEFAULT_BASE_URL = 'https://pouchy.ai/v1/admin';
 /** Default per-request timeout (ms). A hung upstream otherwise never rejects. */
 const DEFAULT_TIMEOUT_MS = 30_000;
@@ -266,6 +266,7 @@ export function createAdminClient(opts) {
         listSkills: () => request('GET', '/skills'),
         installSkill: (input) => request('POST', '/skills', input),
         updateSkill: (slug, patch) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, patch),
+        setSkillAutoRunTools: (slug, toolNames) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { autoRunTools: toolNames }),
         setSkillRate: (slug, ratePerMin) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { ratePerMin }),
         setSkillDailyCap: (slug, maxCallsPerDay) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { maxCallsPerDay }),
         compileSkill: (slug) => request('POST', `/skills/${encodeURIComponent(slug)}/compile`, {}),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@pouchy_ai/admin-sdk",
-	"version": "0.27.1",
+	"version": "0.29.0",
 	"description": "Typed TypeScript client for the Pouchy Admin API \u2014 manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
 	"type": "module",
 	"license": "SEE LICENSE IN LICENSE",