@pouchy_ai/admin-sdk 0.40.0 → 0.41.0

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.41.0 — 2026-10-02
+
+- **Three world session-mint codes join `ADMIN_ERROR_CODES`.** `POST
+  /v1/sessions` with a `world` block used to answer all three membership
+  conflicts with one sentence and no `code`, telling the caller to start a
+  fresh `world_instance`. Each now carries its own 409 code:
+  `world_actor_conflict` (the role in this world instance is bound to a
+  different agent, registry instance or key environment — mint with the ones
+  that first entered it), `world_revision_mismatch` and
+  `world_provider_mismatch` (both a race between two concurrent first mints of
+  one world instance — retry the mint). A worldline whose project merely
+  edited or promoted the role's agent, or republished one of its
+  capabilities, is no longer refused at all. Additive; no method changed.
+
+## 0.40.1 — 2026-09-30
+
+- **A 2xx whose body cannot be read now rejects with `AdminApiError`.** It
+  used to resolve as `{}` typed as the method's result: an HTML 200 from a
+  proxy or captive portal, a truncated body, or a deadline that fired
+  mid-body read as a success with every field `undefined`. For a one-shot
+  secret (`createKey`, `rotateKey`, `createWebhook`, `rotateWebhookSecret`)
+  the server had already minted it, and the caller lost it silently. The
+  error's `status` is the server's 2xx, because the request did land: do not
+  blindly retry a mint. A 204 / 205 still resolves `{}`; non-2xx errors are
+  unchanged.
+
 ## 0.40.0 — 2026-09-29
 
 - **`recording` on agents.** Turning it on grants `call.record` on the agent's

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export declare const ADMIN_SDK_VERSION = "0.40.0";
+export declare const ADMIN_SDK_VERSION = "0.41.0";
 export declare const DEFAULT_BASE_URL = "https://pouchy.ai/v1/admin";
 /** Deadline for the routes whose server handler declares `maxDuration: 300` —
  *  the server's own ceiling plus headroom, so a client abort can only ever mean
@@ -60,7 +60,7 @@ export interface AdminClientOptions {
  *  published: on this plane the status line never disambiguates, so two of the
  *  durable-run routes answer 409 for two entirely different reasons each, with
  *  different recoveries. `code` is the only thing that tells them apart. */
-export declare const ADMIN_ERROR_CODES: readonly ["story_contract_v2_write_disabled", "story_contract_v3_write_disabled", "story_contract_v4_write_disabled", "has_pins", "pins_unknown", "story_package_limit", "story_package_documents_limit", "episode_history_incomplete", "episode_ended", "idempotency_key_reused", "stale_deliberation", "deliberation_disabled", "deliberation_uncalibrated", "deliberation_not_enabled", "deliberation_candidates_exceeded", "schedule_limit_reached", "one_shot_spent", "ghost_row", "channel_limit_reached", "webhook_limit_reached", "run_limit_reached", "reembed_required", "run_terminal", "run_not_parked", "stale_token", "run_not_waiting", "event_mismatch", "subscription_exists"];
+export declare const ADMIN_ERROR_CODES: readonly ["story_contract_v2_write_disabled", "story_contract_v3_write_disabled", "story_contract_v4_write_disabled", "has_pins", "pins_unknown", "story_package_limit", "story_package_documents_limit", "episode_history_incomplete", "episode_ended", "idempotency_key_reused", "stale_deliberation", "deliberation_disabled", "deliberation_uncalibrated", "deliberation_not_enabled", "deliberation_candidates_exceeded", "schedule_limit_reached", "one_shot_spent", "ghost_row", "channel_limit_reached", "webhook_limit_reached", "run_limit_reached", "reembed_required", "run_terminal", "run_not_parked", "stale_token", "run_not_waiting", "event_mismatch", "subscription_exists", "world_actor_conflict", "world_revision_mismatch", "world_provider_mismatch"];
 /** `AdminApiError.code` values. The `(string & {})` arm keeps the type open for
  *  codes newer than this SDK build while preserving autocomplete — same
  *  doctrine as the companion SDK's `CompanionErrorCodeValue`. */

package/dist/index.js

@@ -8,7 +8,7 @@
 //   import { createAdminClient } from '@pouchy_ai/admin-sdk';
 //   const admin = createAdminClient({ adminKey: process.env.POUCHY_ADMIN_KEY! });
 //   const { agents } = await admin.listAgents();
-export const ADMIN_SDK_VERSION = '0.40.0';
+export const ADMIN_SDK_VERSION = '0.41.0';
 export const DEFAULT_BASE_URL = 'https://pouchy.ai/v1/admin';
 /** Default per-request timeout (ms). A hung upstream otherwise never rejects. */
 const DEFAULT_TIMEOUT_MS = 30_000;
@@ -100,7 +100,14 @@ export const ADMIN_ERROR_CODES = [
     // 0.38.0 — checkout on an account that already pays through a live
     // subscription. Recovery: POST /v1/projects/{id}/billing/upgrade, which moves
     // that subscription to the new price instead of opening a second one.
-    'subscription_exists'
+    'subscription_exists',
+    // 0.41.0 — the three world session-mint conflicts (`POST /v1/sessions` with
+    // `world`). `world_actor_conflict`: the role is bound to a different agent,
+    // registry instance or key environment. The other two are races between
+    // two concurrent FIRST mints of one world instance; retry the mint.
+    'world_actor_conflict',
+    'world_revision_mismatch',
+    'world_provider_mismatch'
 ];
 /** Thrown on any non-2xx response AND on a transport failure that never reached
  *  the server (network / DNS / timeout), which carries `status: 0`. `status` is
@@ -270,7 +277,25 @@ export function createAdminClient(opts) {
                 ? `${method} ${path} — request timed out after ${timeoutMs}ms`
                 : `${method} ${path} — network error: ${e instanceof Error ? e.message : String(e)}`, 0);
         }
-        const data = (await res.json().catch(() => ({})));
+        // 0.40.1: a 2xx whose body cannot be read is an error, not `{}`. It used
+        // to resolve as a success with every field undefined — an HTML 200 from a
+        // proxy, a truncated body, a deadline that fired mid-body — and a secret
+        // the server had already minted (`createKey`, `rotateKey`,
+        // `createWebhook`) was lost with no signal. `status` stays the server's
+        // 2xx: the request DID land, so a blind retry of a mint is not safe. A
+        // 204 / 205 (no body by definition) still resolves `{}`, and the non-2xx
+        // arm keeps its fallback. Still `res.json()`, not `text()`: an injected
+        // `fetch` may hand back a minimal response that only implements `json`.
+        let readError = null;
+        const data = (await res.json().catch((e) => {
+            readError = e;
+            return {};
+        }));
+        if (res.ok && readError !== null && res.status !== 204 && res.status !== 205) {
+            const why = readError instanceof Error ? readError.message : String(readError);
+            const msg = `${method} ${path} — unreadable ${res.status} body: ${why}`;
+            throw new AdminApiError(msg, res.status, retryAfterFrom(res, null));
+        }
         if (!res.ok)
             throw new AdminApiError(
             // The server's own `error` string is passed through UNCHANGED — it is

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@pouchy_ai/admin-sdk",
-	"version": "0.40.0",
+	"version": "0.41.0",
 	"description": "Typed TypeScript client for the Pouchy Admin API \u2014 manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
 	"type": "module",
 	"license": "SEE LICENSE IN LICENSE",