@pouchy_ai/admin-sdk 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.9.0 — 2026-07-28
+
+- **Channel CRUD is typed (CR-77).** `createChannel` takes
+  `type: CreatableChannelType` instead of `string` — the full 31-transport
+  union, minus `internal-a2a`, which is in the platform's union but has no
+  adapter and is answered 400, so excluding it turns a runtime rejection into a
+  compile error. `secret` is now `ChannelSecretInput` (`token`,
+  `inboundSecret`, `extra`) rather than `Record<string, unknown>`.
+- The union is a duplicate of the server's `TransportType` (this package is
+  standalone and cannot import it), so a drift gate binds the two and fails CI
+  in BOTH directions — a transport on one side and not the other is either an
+  integrator typed out of a working call, or a compile-time promise the API
+  rejects.
+- Per-transport `secret.extra` field lists are still documented in
+  <https://pouchy.ai/docs/channel-setup> rather than modelled per type: the sets are
+  operator-supplied and move with each provider's own console.
+
 ## 0.8.0 — 2026-07-28
 
 - **Durable runs.** `listRuns`, `createRun`, `getRun`, `cancelRun`, `resumeRun`,

package/README.md

@@ -142,6 +142,11 @@ Reads (`GET`) are not covered by that bucket. `retryAfter` is available from
 | Channels | `listChannels` · `createChannel` · `getChannel` · `updateChannel` · `deleteChannel` |
 | Schedules | `listSchedules` · `createSchedule` · `getSchedule` · `updateSchedule` · `deleteSchedule` |
 | Durable runs | `listRuns` · `createRun` · `getRun` · `cancelRun` · `resumeRun` · `signalRun` |
+
+Channel types are checked at compile time: `createChannel` takes a
+`CreatableChannelType` (the platform's 31-transport union minus the adapterless
+`internal-a2a`), and `secret` is a named `ChannelSecretInput`. Per-transport
+`secret.extra` fields are listed in <https://pouchy.ai/docs/channel-setup>.
 | Webhooks | `listWebhooks` · `createWebhook` · `updateWebhook` · `rotateWebhookSecret` · `deleteWebhook` · `testWebhook` · `redeliverWebhook` |
 | Reporting | `getUsage` · `getBilling` · `getTracesSummary` · `getRecentTraces` · `getLogs` · `getProject` · `updateProject` |
 | Escape hatch | `request(method, path, body?)` — any endpoint not yet typed |

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export declare const ADMIN_SDK_VERSION = "0.8.0";
+export declare const ADMIN_SDK_VERSION = "0.9.0";
 export declare const DEFAULT_BASE_URL = "https://pouchy.ai/v1/admin";
 /** Deadline for the routes whose server handler declares `maxDuration: 300` —
  *  the server's own ceiling plus headroom, so a client abort can only ever mean
@@ -166,6 +166,31 @@ export interface DeliveryOutcome {
 }
 /** The Admin API client. Every method returns the parsed JSON body; failures
  *  throw AdminApiError. */
+/** Every transport the platform knows. Mirrors the server's `TransportType`
+ *  (`channels/types.ts`) — this package is standalone and cannot import it, so
+ *  `admin-sdk-channel-types.drift.test.ts` binds the two and fails CI if either
+ *  side gains a transport the other lacks. */
+export type ChannelTransportType = 'echo' | 'matrix' | 'telegram' | 'web' | 'activitypub' | 'internal-a2a' | 'discord' | 'slack' | 'nostr' | 'atproto' | 'sms' | 'email' | 'whatsapp' | 'messenger' | 'instagram' | 'line' | 'teams' | 'wechat' | 'wecom' | 'feishu' | 'dingtalk' | 'twitter' | 'xmpp' | 'qq' | 'kakao' | 'viber' | 'signal' | 'weibo' | 'alexa' | 'google-assistant' | 'voice';
+/** Transports `createChannel` accepts. `internal-a2a` is in the union but has
+ *  no adapter, so the server answers 400 — excluding it here turns a runtime
+ *  rejection into a compile error. */
+export type CreatableChannelType = Exclude<ChannelTransportType, 'internal-a2a'>;
+/** Credentials for a connector, sealed server-side as one AES-GCM blob.
+ *
+ *  `extra` is where the transports needing more than a token live — Twitter
+ *  OAuth 1.0a (`consumerKey`/`consumerSecret`/`accessToken`/`accessTokenSecret`),
+ *  Teams AAD (`appId`/`appPassword`), QQ (`appId` + Ed25519 seed), the WeChat
+ *  family's mint credentials. Per-transport field lists are documented in
+ *  https://pouchy.ai/docs/channel-setup; they are not modelled per-type here because the set
+ *  is operator-supplied and moves with each provider's own console. */
+export interface ChannelSecretInput {
+    /** Bot access token / API key used for outbound delivery. */
+    token?: string;
+    /** Inbound signing secret (e.g. Telegram `secret_token`, Matrix `hs_token`). */
+    inboundSecret?: string;
+    /** Extra named credentials for transports whose auth needs more than the pair above. */
+    extra?: Record<string, string>;
+}
 /** A durable run as the API returns it. Typed rather than `unknown` because
  *  the parked-run flow — read `status`, read `awaiting.token`, answer — is the
  *  SDK's most important interaction, and forcing a cast there would put the
@@ -511,13 +536,13 @@ export interface AdminClient {
         connectors: unknown[];
     }>;
     createChannel(input: {
-        type: string;
+        type: CreatableChannelType;
         agentId: string;
         env?: Env;
         config?: Record<string, unknown>;
         /** Connector credentials (bot token, signing secret, …) — stored
          *  encrypted, never returned. */
-        secret?: Record<string, unknown>;
+        secret?: ChannelSecretInput;
     }): Promise<{
         connector: {
             id: string;

package/dist/index.js

@@ -8,7 +8,7 @@
 //   import { createAdminClient } from '@pouchy_ai/admin-sdk';
 //   const admin = createAdminClient({ adminKey: process.env.POUCHY_ADMIN_KEY! });
 //   const { agents } = await admin.listAgents();
-export const ADMIN_SDK_VERSION = '0.8.0';
+export const ADMIN_SDK_VERSION = '0.9.0';
 export const DEFAULT_BASE_URL = 'https://pouchy.ai/v1/admin';
 /** Default per-request timeout (ms). A hung upstream otherwise never rejects. */
 const DEFAULT_TIMEOUT_MS = 30_000;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pouchy_ai/admin-sdk",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Typed TypeScript client for the Pouchy Admin API \u2014 manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",