@pouchy_ai/admin-sdk 0.28.0 → 0.29.0

package/CHANGELOG.md

@@ -2,6 +2,28 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.29.0 — 2026-08-31
+
+- **`setSkillAutoRunTools(slug, toolNames)` — the per-tool confirm exemptions
+  (免确认工具) the Admin API could not reach.** Admin API 1.12.0. The knob
+  existed on the owner plane and in the dashboard since 2026-08 and was never
+  added here, so a headless provisioning flow could install a skill, rate-limit
+  it, grant its domains and attach it to an agent — and then answer nothing.
+  For MCP skills that is not an edge case: `mcpRecord` hard-codes
+  `platformSafe: false`, so every `run_skill` raises a confirm, and a platform
+  instance has no human who could ever approve one. This was the only route out.
+
+  A full REPLACE, not a merge — pass the complete list each call. Names the
+  skill does not declare are dropped and echoed in `dropped`, so a typo is
+  visible rather than silently ungranted. Grant the READ tools (a storefront's
+  `search_catalog` / `get_product`); leave cart mutations and order placement
+  gated.
+
+  Opening this to a long-lived admin key was an explicit decision, not a
+  symmetry fix: the confirm being waived is not a human in the loop (on an
+  instance nobody can approve it), and the same key already grants the strictly
+  wider `freeHttp` + `grantedDomains`.
+
 ## 0.28.0 — 2026-08-29
 
 - **`installSkill` / `importAgentPlugin` now type the re-push outcome.** Both

package/README.md

@@ -243,7 +243,8 @@ that voice, or the voice catalog is temporarily unreachable; retry),
 like the other voice planes — there is no separate platform credit rate; it is
 bounded by an input cap and the shared per-IP utility rate limit.
 
-Every skill knob (`setSkillRate`, `setSkillDailyCap`, `grantSkill`) returns
+Every skill knob (`setSkillRate`, `setSkillDailyCap`, `grantSkill`,
+`setSkillAutoRunTools`) returns
 `SkillKnobResult<T>` — the knob you set plus `reprovisioned` (instances the new
 def reached) and `truncated`. A knob only binds a running agent once the def
 reaches its instance, so `truncated: true` means the sweep hit its cap (100
@@ -436,7 +437,7 @@ Reads (`GET`) are not covered by that bucket. `retryAfter` is available from
 | Secret keys | `listKeys` · `createKey` · `revokeKey` · `rotateKey` (24 h grace) |
 | End users | `listUsers({ limit?, cursor? })` (cursor-paginated — the response's `nextCursor` feeds the next page; filter variants: `external_user_id` / `external_user_prefix`) · `setUserSuspended` · `deleteUser` · `getUserWallet` · `getUserTraces` · `importUsers` · `exportUser` · `getUserSessions` · `getUserTurns` |
 | Knowledge | `listKnowledge` · `ingestKnowledge` · `ingestKnowledgeFile` (PDF/audio/video/image) · `ingestKnowledgeUrl` (web page) · `searchKnowledge` (recall probe) · `deleteKnowledge` |
-| Skills | `listSkills` · `installSkill` · `updateSkill` · `setSkillRate` · `setSkillDailyCap` · `grantSkill` (free-HTTP) · `compileSkill` (prose→tools) · `uninstallSkill` · `importAgentPlugin` / `exportAgentPlugin` (Agent Plugins 1.0.0 interop) |
+| Skills | `listSkills` · `installSkill` · `updateSkill` · `setSkillRate` · `setSkillDailyCap` · `grantSkill` (free-HTTP) · `setSkillAutoRunTools` (免确认工具 — required to arm an MCP skill on an instance) · `compileSkill` (prose→tools) · `uninstallSkill` · `importAgentPlugin` / `exportAgentPlugin` (Agent Plugins 1.0.0 interop) |
 | Credentials | `listCredentials` · `putCredentials` · `deleteCredentials` |
 | Channels | `listChannels` · `createChannel` · `getChannel` · `updateChannel` · `deleteChannel` |
 | Schedules | `listSchedules` · `createSchedule` · `getSchedule` · `updateSchedule` · `deleteSchedule` |

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export declare const ADMIN_SDK_VERSION = "0.28.0";
+export declare const ADMIN_SDK_VERSION = "0.29.0";
 export declare const DEFAULT_BASE_URL = "https://pouchy.ai/v1/admin";
 /** Deadline for the routes whose server handler declares `maxDuration: 300` —
  *  the server's own ceiling plus headroom, so a client abort can only ever mean
@@ -888,6 +888,25 @@ export interface AdminClient {
         freeHttp: boolean;
         grantedDomains: string[];
     }>>;
+    /** Per-tool confirm exemptions (免确认工具) — the tools an INSTANCE may call
+     *  without a confirm card.
+     *
+     *  The one knob a headless flow could not reach before 0.29.0, and for MCP
+     *  skills it is not optional: `mcpRecord` hard-codes `platformSafe: false`,
+     *  so every `run_skill` raises a confirm — and a platform instance has no
+     *  human who could ever approve one (a synthetic uid has no Firebase user).
+     *  Without this the skill installs, rate-limits and attaches cleanly and then
+     *  answers nothing. Grant the READ tools (a storefront's `search_catalog` /
+     *  `get_product`) and leave anything that mutates a cart or places an order
+     *  gated.
+     *
+     *  A full REPLACE, not a merge — pass the complete list every call. Names the
+     *  skill does not declare are dropped and echoed back in `dropped`, so a typo
+     *  is visible rather than silently ungranted. */
+    setSkillAutoRunTools(slug: string, toolNames: string[]): Promise<SkillKnobResult<{
+        autoRunTools: string[];
+        dropped: string[];
+    }>>;
     uninstallSkill(slug: string): Promise<{
         deleted: boolean;
     }>;

package/dist/index.js

@@ -8,7 +8,7 @@
 //   import { createAdminClient } from '@pouchy_ai/admin-sdk';
 //   const admin = createAdminClient({ adminKey: process.env.POUCHY_ADMIN_KEY! });
 //   const { agents } = await admin.listAgents();
-export const ADMIN_SDK_VERSION = '0.28.0';
+export const ADMIN_SDK_VERSION = '0.29.0';
 export const DEFAULT_BASE_URL = 'https://pouchy.ai/v1/admin';
 /** Default per-request timeout (ms). A hung upstream otherwise never rejects. */
 const DEFAULT_TIMEOUT_MS = 30_000;
@@ -266,6 +266,7 @@ export function createAdminClient(opts) {
         listSkills: () => request('GET', '/skills'),
         installSkill: (input) => request('POST', '/skills', input),
         updateSkill: (slug, patch) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, patch),
+        setSkillAutoRunTools: (slug, toolNames) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { autoRunTools: toolNames }),
         setSkillRate: (slug, ratePerMin) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { ratePerMin }),
         setSkillDailyCap: (slug, maxCallsPerDay) => request('PATCH', `/skills/${encodeURIComponent(slug)}`, { maxCallsPerDay }),
         compileSkill: (slug) => request('POST', `/skills/${encodeURIComponent(slug)}/compile`, {}),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@pouchy_ai/admin-sdk",
-	"version": "0.28.0",
+	"version": "0.29.0",
 	"description": "Typed TypeScript client for the Pouchy Admin API \u2014 manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
 	"type": "module",
 	"license": "SEE LICENSE IN LICENSE",