@shadowob/sdk 1.1.3 → 1.1.4

package/dist/index.cjs

@@ -87,12 +87,13 @@ var ShadowClient = class {
     const url = `${this.baseUrl}${path}`;
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), 6e4);
+    const isFormData = init?.body instanceof FormData;
     try {
       const res = await fetch(url, {
         ...init,
         signal: init?.signal ?? controller.signal,
         headers: {
-          "Content-Type": "application/json",
+          ...!isFormData ? { "Content-Type": "application/json" } : {},
           Authorization: `Bearer ${this.token}`,
           ...init?.headers
         }
@@ -217,8 +218,11 @@ var ShadowClient = class {
     });
   }
   // ── Agents ────────────────────────────────────────────────────────────
-  async listAgents() {
-    return this.request("/api/agents");
+  async listAgents(options) {
+    const params = new URLSearchParams();
+    if (options?.includeRentals) params.set("includeRentals", "true");
+    const query = params.toString();
+    return this.request(`/api/agents${query ? `?${query}` : ""}`);
   }
   async createAgent(data) {
     return this.request("/api/agents", {
@@ -334,15 +338,113 @@ var ShadowClient = class {
   async getServerAccess(serverIdOrSlug) {
     return this.request(`/api/servers/${serverIdOrSlug}/access`);
   }
+  // ── Server App Integrations ───────────────────────────────────────────
+  async listServerApps(serverIdOrSlug) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps`);
+  }
+  async listServerAppCatalog(serverIdOrSlug) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/catalog`);
+  }
+  async discoverServerApp(serverIdOrSlug, data) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/discover`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
+  async installServerApp(serverIdOrSlug, data) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
+  async installServerAppFromCatalog(serverIdOrSlug, catalogEntryId, data = {}) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/catalog/${encodeURIComponent(catalogEntryId)}/install`,
+      {
+        method: "POST",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  async getServerApp(serverIdOrSlug, appKey) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}`);
+  }
+  async deleteServerApp(serverIdOrSlug, appKey) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}`, {
+      method: "DELETE"
+    });
+  }
+  async grantServerAppToBuddy(serverIdOrSlug, appKey, data) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/grants`,
+      {
+        method: "POST",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  async getServerAppSkills(serverIdOrSlug, appKey) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/skills`);
+  }
+  async createServerAppLaunch(serverIdOrSlug, appKey) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/launch`,
+      {
+        method: "POST"
+      }
+    );
+  }
+  async introspectServerAppToken(serverIdOrSlug, appKey, token) {
+    const url = `${this.baseUrl}/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(
+      appKey
+    )}/oauth/introspect`;
+    const res = await fetch(url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ token })
+    });
+    if (!res.ok) {
+      const body = await res.text().catch(() => "");
+      const message = sanitizeErrorBody(body);
+      throw new Error(`Shadow API POST /oauth/introspect failed (${res.status}): ${message}`);
+    }
+    return await res.json();
+  }
+  async callServerAppCommand(serverIdOrSlug, appKey, commandName, data) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/commands/${encodeURIComponent(
+        commandName
+      )}`,
+      {
+        method: "POST",
+        body: JSON.stringify(data ?? {})
+      }
+    );
+  }
+  async callServerAppCommandMultipart(serverIdOrSlug, appKey, commandName, data) {
+    const form = new FormData();
+    form.set("input", JSON.stringify(data.input ?? {}));
+    if (data.channelId) form.set("channelId", data.channelId);
+    form.set(data.field ?? "file", data.file, data.filename);
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/commands/${encodeURIComponent(
+        commandName
+      )}`,
+      {
+        method: "POST",
+        body: form
+      }
+    );
+  }
   async updateServer(serverIdOrSlug, data) {
     return this.request(`/api/servers/${serverIdOrSlug}`, {
       method: "PATCH",
       body: JSON.stringify(data)
     });
   }
-  async updateServerHomepage(serverIdOrSlug, homepageHtml) {
-    return this.updateServer(serverIdOrSlug, { homepageHtml });
-  }
   async deleteServer(serverId) {
     return this.request(`/api/servers/${serverId}`, { method: "DELETE" });
   }
@@ -407,6 +509,14 @@ var ShadowClient = class {
     const ch = await this.request(`/api/channels/${channelId}`);
     return { ...ch, description: ch.topic };
   }
+  async getChannelBootstrap(channelId, options) {
+    const params = new URLSearchParams();
+    if (options?.messagesLimit) params.set("messagesLimit", String(options.messagesLimit));
+    const query = params.toString();
+    return this.request(
+      `/api/channels/${channelId}/bootstrap${query ? `?${query}` : ""}`
+    );
+  }
   async getChannelAccess(channelId) {
     return this.request(`/api/channels/${channelId}/access`);
   }
@@ -670,9 +780,19 @@ var ShadowClient = class {
     return res.json();
   }
   async resolveAttachmentMediaUrl(attachmentId, options) {
-    const disposition = options?.disposition ?? "inline";
+    const params = new URLSearchParams();
+    params.set("disposition", options?.disposition ?? "inline");
+    if (options?.variant) params.set("variant", options.variant);
+    return this.request(
+      `/api/attachments/${attachmentId}/media-url?${params}`
+    );
+  }
+  async resolveWorkspaceMediaUrl(serverId, fileId, options) {
+    const params = new URLSearchParams();
+    params.set("disposition", options?.disposition ?? "inline");
+    if (options?.contentRef) params.set("contentRef", options.contentRef);
     return this.request(
-      `/api/attachments/${attachmentId}/media-url?disposition=${disposition}`
+      `/api/servers/${serverId}/workspace/files/${fileId}/media-url?${params}`
     );
   }
   /**
@@ -898,9 +1018,21 @@ var ShadowClient = class {
   async listOAuthAccounts() {
     return this.request("/api/auth/oauth/accounts");
   }
+  async createOAuthConnectUrl(provider, redirect) {
+    return this.request(`/api/auth/oauth/${provider}/link`, {
+      method: "POST",
+      body: JSON.stringify({ redirect })
+    });
+  }
   async unlinkOAuthAccount(accountId) {
     return this.request(`/api/auth/oauth/accounts/${accountId}`, { method: "DELETE" });
   }
+  async listAuthSessions() {
+    return this.request("/api/auth/sessions");
+  }
+  async revokeAuthSession(sessionId) {
+    return this.request(`/api/auth/sessions/${sessionId}`, { method: "DELETE" });
+  }
   async changePassword(data) {
     return this.request("/api/auth/password", {
       method: "PUT",
@@ -1028,6 +1160,21 @@ var ShadowClient = class {
       body: JSON.stringify({ appId })
     });
   }
+  async sendOAuthChannelMessage(channelId, content, opts) {
+    return this.request(`/api/oauth/channels/${channelId}/messages`, {
+      method: "POST",
+      body: JSON.stringify({
+        content,
+        ...opts?.metadata ? { metadata: opts.metadata } : {}
+      })
+    });
+  }
+  async sendOAuthBuddyMessage(buddyId, data) {
+    return this.request(`/api/oauth/buddies/${buddyId}/messages`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
   // ── Marketplace / Rentals ─────────────────────────────────────────────
   async browseListings(params) {
     const qs = new URLSearchParams();

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { MessageMention, MentionSuggestionTrigger, MentionSuggestion } from '@shadowob/shared';
+import { MessageMention, OAuthLinkCard, MentionSuggestionTrigger, MentionSuggestion } from '@shadowob/shared';
 export { CLIENT_EVENTS, ClientEvent, SERVER_EVENTS, ServerEvent } from '@shadowob/shared';
 import { Socket } from 'socket.io-client';
 
@@ -94,6 +94,7 @@ interface ShadowMessageMetadata {
     interactiveResponse?: ShadowInteractiveResponse;
     interactiveState?: ShadowInteractiveState;
     commerceCards?: Array<ShadowCommerceProductCard | ShadowCommerceOfferCardInput>;
+    oauthLinkCards?: ShadowOAuthLinkCard[];
     [key: string]: unknown;
 }
 interface ShadowCommerceOfferCardInput {
@@ -102,6 +103,7 @@ interface ShadowCommerceOfferCardInput {
     offerId: string;
 }
 type ShadowMessageMention = MessageMention;
+type ShadowOAuthLinkCard = OAuthLinkCard;
 type ShadowMentionSuggestion = MentionSuggestion;
 type ShadowMentionSuggestionTrigger = MentionSuggestionTrigger;
 interface ShadowAttachment {
@@ -118,6 +120,149 @@ interface ShadowSignedMediaUrl {
     url: string;
     expiresAt: string;
 }
+type ShadowMediaVariant = 'avatar' | 'preview' | 'banner';
+type ShadowServerAppAction = 'read' | 'write' | 'manage' | 'delete' | 'generate';
+type ShadowServerAppDataClass = 'public' | 'server-private' | 'channel-private' | 'financial' | 'secret' | 'cloud-secret';
+interface ShadowServerAppCommand {
+    name: string;
+    title?: string;
+    description?: string;
+    path: string;
+    method?: 'POST';
+    input?: 'json' | 'multipart';
+    inputSchema?: Record<string, unknown>;
+    permission: string;
+    action: ShadowServerAppAction;
+    dataClass: ShadowServerAppDataClass;
+    approvalMode?: 'none' | 'first_time' | 'every_time' | 'policy';
+    binary?: {
+        supported?: boolean;
+        field?: string;
+        maxBytes?: number;
+        contentTypes?: string[];
+    };
+}
+interface ShadowServerAppManifest {
+    schemaVersion: 'shadow.app/1';
+    appKey: string;
+    name: string;
+    description?: string;
+    version?: string;
+    iconUrl: string;
+    iframe?: {
+        entry: string;
+        allowedOrigins: string[];
+    };
+    api: {
+        baseUrl: string;
+        auth?: {
+            type: 'oauth2-bearer';
+        };
+    };
+    commands: ShadowServerAppCommand[];
+    skills?: Array<{
+        name: string;
+        description: string;
+        commandHints?: string[];
+    }>;
+    events?: string[];
+    binary?: {
+        supported: boolean;
+        maxBytes?: number;
+        contentTypes?: string[];
+    };
+}
+interface ShadowServerAppIntegration {
+    id: string;
+    serverId: string;
+    appKey: string;
+    name: string;
+    description?: string | null;
+    iconUrl?: string | null;
+    manifestUrl?: string | null;
+    manifest: ShadowServerAppManifest;
+    iframeEntry?: string | null;
+    allowedOrigins: string[];
+    apiBaseUrl: string;
+    status: string;
+    installedByUserId: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface ShadowServerAppDiscovery {
+    manifest: ShadowServerAppManifest;
+    installed: ShadowServerAppIntegration | null;
+    permissions: Array<{
+        name: string;
+        title: string;
+        description?: string | null;
+        permission: string;
+        action: ShadowServerAppAction;
+        dataClass: ShadowServerAppDataClass;
+        approvalMode: 'none' | 'first_time' | 'every_time' | 'policy';
+    }>;
+}
+interface ShadowServerAppCatalogEntry {
+    id: string;
+    appKey: string;
+    name: string;
+    description?: string | null;
+    iconUrl?: string | null;
+    manifestUrl?: string | null;
+    manifest: ShadowServerAppManifest;
+    status: string;
+    installed?: ShadowServerAppIntegration | null;
+    permissions?: ShadowServerAppDiscovery['permissions'];
+    createdAt: string;
+    updatedAt: string;
+}
+interface ShadowServerAppLaunchContext {
+    serverId: string;
+    serverAppId: string;
+    appKey: string;
+    iframeEntry: string | null;
+    allowedOrigins: string[];
+    launchToken: string;
+    eventStreamPath: string;
+    expiresIn: number;
+}
+interface ShadowServerAppSkillDocument {
+    appKey: string;
+    markdown: string;
+    skills: Array<{
+        name: string;
+        description: string;
+        commandHints?: string[];
+    }>;
+}
+interface ShadowServerAppTokenIntrospection {
+    active: boolean;
+    token_type?: 'Bearer';
+    iss?: string;
+    aud?: string;
+    sub?: string;
+    scope?: string;
+    client_id?: string;
+    exp?: number;
+    iat?: number;
+    shadow?: {
+        protocol: 'shadow.app/1';
+        serverId: string;
+        serverAppId: string;
+        appKey: string;
+        command?: string;
+        actor: {
+            kind?: string;
+            userId?: string | null;
+            buddyAgentId?: string | null;
+            ownerId?: string | null;
+        };
+        channelId?: string | null;
+        permission?: string;
+        action?: string;
+        dataClass?: string;
+    };
+}
 interface ShadowChannel {
     id: string;
     name: string;
@@ -215,7 +360,6 @@ interface ShadowServer {
     description: string | null;
     iconUrl: string | null;
     bannerUrl: string | null;
-    homepageHtml: string | null;
     isPublic: boolean;
 }
 interface ShadowUser {
@@ -385,7 +529,15 @@ interface ShadowChannelPolicy {
     listen: boolean;
     reply: boolean;
     mentionOnly: boolean;
-    config: Record<string, unknown>;
+    config: ShadowChannelPolicyConfig;
+}
+interface ShadowChannelPolicyConfig {
+    allowedTriggerUserIds?: string[];
+    triggerUserIds?: string[];
+    ownerId?: string;
+    activeTenantIds?: string[];
+    replyRequiresMention?: boolean;
+    [key: string]: unknown;
 }
 interface ShadowSlashCommand {
     name: string;
@@ -401,6 +553,20 @@ interface ShadowChannelSlashCommand extends ShadowSlashCommand {
     botUsername: string;
     botDisplayName?: string | null;
 }
+interface ShadowChannelBootstrap {
+    access: ShadowChannelAccess;
+    channel: ShadowChannel;
+    server: ShadowServer | null;
+    channels: ShadowChannel[];
+    members: ShadowMember[];
+    messages: {
+        messages: ShadowMessage[];
+        hasMore: boolean;
+    };
+    slashCommands: {
+        commands: ShadowChannelSlashCommand[];
+    };
+}
 interface ShadowRemoteChannel {
     id: string;
     name: string;
@@ -418,6 +584,11 @@ interface ShadowRemoteServer {
 interface ShadowRemoteConfig {
     agentId: string;
     botUserId: string;
+    ownerId?: string;
+    buddyMode?: 'private' | 'shareable';
+    allowedServerIds?: string[];
+    activeTenantIds?: string[];
+    allowedTriggerUserIds?: string[];
     slashCommands?: ShadowSlashCommand[];
     servers: ShadowRemoteServer[];
 }
@@ -1426,10 +1597,15 @@ declare class ShadowClient {
     getOfficialModelProxyBilling(): Promise<ShadowModelProxyBilling>;
     createOfficialChatCompletion(data: ShadowModelProxyChatCompletionRequest): Promise<ShadowModelProxyChatCompletionResponse>;
     createOfficialChatCompletionStream(data: ShadowModelProxyChatCompletionRequest): Promise<Response>;
-    listAgents(): Promise<{
+    listAgents(options?: {
+        includeRentals?: boolean;
+    }): Promise<{
         id: string;
-        name: string;
+        name?: string;
         status: string;
+        accessRole?: 'owner' | 'tenant';
+        activeContractId?: string | null;
+        config?: Record<string, unknown>;
     }[]>;
     createAgent(data: {
         name: string;
@@ -1439,6 +1615,8 @@ declare class ShadowClient {
         avatarUrl?: string | null;
         kernelType?: string;
         config?: Record<string, unknown>;
+        buddyMode?: 'private' | 'shareable';
+        allowedServerIds?: string[];
     }): Promise<{
         id: string;
         token: string;
@@ -1454,6 +1632,8 @@ declare class ShadowClient {
         name?: string;
         displayName?: string;
         avatarUrl?: string | null;
+        buddyMode?: 'private' | 'shareable';
+        allowedServerIds?: string[];
     }): Promise<{
         id: string;
         name: string;
@@ -1524,14 +1704,50 @@ declare class ShadowClient {
     listServers(): Promise<ShadowServer[]>;
     getServer(serverIdOrSlug: string): Promise<ShadowServer>;
     getServerAccess(serverIdOrSlug: string): Promise<ShadowServerAccess>;
+    listServerApps(serverIdOrSlug: string): Promise<ShadowServerAppIntegration[]>;
+    listServerAppCatalog(serverIdOrSlug: string): Promise<ShadowServerAppCatalogEntry[]>;
+    discoverServerApp(serverIdOrSlug: string, data: {
+        manifestUrl?: string;
+        manifest?: ShadowServerAppManifest;
+    }): Promise<ShadowServerAppDiscovery>;
+    installServerApp(serverIdOrSlug: string, data: {
+        manifestUrl?: string;
+        manifest?: ShadowServerAppManifest;
+    }): Promise<ShadowServerAppIntegration>;
+    installServerAppFromCatalog(serverIdOrSlug: string, catalogEntryId: string, data?: Record<string, never>): Promise<ShadowServerAppIntegration>;
+    getServerApp(serverIdOrSlug: string, appKey: string): Promise<ShadowServerAppIntegration & {
+        grants?: Record<string, unknown>[];
+    }>;
+    deleteServerApp(serverIdOrSlug: string, appKey: string): Promise<{
+        ok: boolean;
+    }>;
+    grantServerAppToBuddy(serverIdOrSlug: string, appKey: string, data: {
+        buddyAgentId: string;
+        permissions: string[];
+        resourceRules?: Record<string, unknown>;
+        approvalMode?: 'none' | 'first_time' | 'every_time' | 'policy';
+        expiresAt?: string;
+    }): Promise<Record<string, unknown>>;
+    getServerAppSkills(serverIdOrSlug: string, appKey: string): Promise<ShadowServerAppSkillDocument>;
+    createServerAppLaunch(serverIdOrSlug: string, appKey: string): Promise<ShadowServerAppLaunchContext>;
+    introspectServerAppToken(serverIdOrSlug: string, appKey: string, token: string): Promise<ShadowServerAppTokenIntrospection>;
+    callServerAppCommand(serverIdOrSlug: string, appKey: string, commandName: string, data?: {
+        input?: unknown;
+        channelId?: string;
+    }): Promise<unknown>;
+    callServerAppCommandMultipart(serverIdOrSlug: string, appKey: string, commandName: string, data: {
+        input?: unknown;
+        channelId?: string;
+        file: Blob;
+        filename: string;
+        field?: string;
+    }): Promise<unknown>;
     updateServer(serverIdOrSlug: string, data: {
         name?: string;
         description?: string | null;
         slug?: string | null;
-        homepageHtml?: string | null;
         isPublic?: boolean;
     }): Promise<ShadowServer>;
-    updateServerHomepage(serverIdOrSlug: string, homepageHtml: string | null): Promise<ShadowServer>;
     deleteServer(serverId: string): Promise<{
         success: boolean;
     }>;
@@ -1564,6 +1780,9 @@ declare class ShadowClient {
         isPrivate?: boolean;
     }): Promise<ShadowChannel>;
     getChannel(channelId: string): Promise<ShadowChannel>;
+    getChannelBootstrap(channelId: string, options?: {
+        messagesLimit?: number;
+    }): Promise<ShadowChannelBootstrap>;
     getChannelAccess(channelId: string): Promise<ShadowChannelAccess>;
     getChannelMembers(channelId: string): Promise<ShadowMember[]>;
     updateChannel(channelId: string, data: {
@@ -1699,6 +1918,11 @@ declare class ShadowClient {
     }>;
     resolveAttachmentMediaUrl(attachmentId: string, options?: {
         disposition?: 'inline' | 'attachment';
+        variant?: ShadowMediaVariant;
+    }): Promise<ShadowSignedMediaUrl>;
+    resolveWorkspaceMediaUrl(serverId: string, fileId: string, options?: {
+        disposition?: 'inline' | 'attachment';
+        contentRef?: string;
     }): Promise<ShadowSignedMediaUrl>;
     /**
      * Download a file from a URL and upload it to the Shadow media service.
@@ -1788,11 +2012,28 @@ declare class ShadowClient {
     listOAuthAccounts(): Promise<{
         id: string;
         provider: string;
-        providerAccountId: string;
+        providerEmail: string | null;
+        createdAt: string;
     }[]>;
+    createOAuthConnectUrl(provider: 'google' | 'github', redirect?: string): Promise<{
+        url: string;
+    }>;
     unlinkOAuthAccount(accountId: string): Promise<{
         success: boolean;
     }>;
+    listAuthSessions(): Promise<Array<{
+        id: string;
+        deviceName: string | null;
+        userAgent: string | null;
+        ipAddress: string | null;
+        lastSeenAt: string;
+        createdAt: string;
+        revokedAt: string | null;
+        current: boolean;
+    }>>;
+    revokeAuthSession(sessionId: string): Promise<{
+        ok: boolean;
+    }>;
     changePassword(data: {
         currentPassword: string;
         newPassword: string;
@@ -1883,6 +2124,18 @@ declare class ShadowClient {
     revokeOAuthConsent(appId: string): Promise<{
         success: boolean;
     }>;
+    sendOAuthChannelMessage(channelId: string, content: string, opts?: {
+        metadata?: {
+            oauthLinkCards?: ShadowOAuthLinkCard[];
+        };
+    }): Promise<ShadowMessage>;
+    sendOAuthBuddyMessage(buddyId: string, data: {
+        channelId: string;
+        content: string;
+        metadata?: {
+            oauthLinkCards?: ShadowOAuthLinkCard[];
+        };
+    }): Promise<ShadowMessage>;
     browseListings(params?: {
         search?: string;
         tags?: string[];
@@ -2502,4 +2755,4 @@ declare class ShadowSocket {
     updateActivity(channelId: string, activity: string | null): void;
 }
 
-export { type ChannelCreatedPayload, type ChannelMemberAddedPayload, type ChannelMemberRemovedPayload, type ClientEventMap, type MemberJoinPayload, type MemberLeavePayload, type MessageDeletedPayload, type PolicyChangedPayload, type PresenceActivityPayload, type PresenceChangePayload, type ReactionPayload, type ServerEventMap, type ServerJoinedPayload, type ShadowAddAgentsToServerResult, type ShadowAgentUsageSnapshotInput, type ShadowAttachment, type ShadowCartItem, type ShadowCategory, type ShadowChannel, type ShadowChannelAccess, type ShadowChannelJoinRequestResult, type ShadowChannelJoinRequestStatus, type ShadowChannelPolicy, type ShadowChannelSlashCommand, ShadowClient, type ShadowCloudDeploymentBackup, type ShadowCloudDeploymentRuntimeResponse, type ShadowCloudDeploymentStatus, type ShadowCloudProviderCatalog, type ShadowCloudProviderEnvVar, type ShadowCloudProviderModel, type ShadowCloudProviderProfile, type ShadowContract, type ShadowDiyCloudRun, type ShadowDiyCloudRunEvent, type ShadowDiyCloudRunStatus, type ShadowFriendship, type ShadowInteractiveActionInput, type ShadowInteractiveActionResult, type ShadowInteractiveBlock, type ShadowInteractiveResponse, type ShadowInteractiveState, type ShadowInteractiveSubmissionPending, type ShadowInviteCode, type ShadowListing, type ShadowMember, type ShadowMentionSuggestion, type ShadowMentionSuggestionTrigger, type ShadowMessage, type ShadowMessageMention, type ShadowModelProxyBilling, type ShadowModelProxyChatCompletionRequest, type ShadowModelProxyChatCompletionResponse, type ShadowModelProxyModel, type ShadowModelProxyModelsResponse, type ShadowNotification, type ShadowNotificationPreferences, type ShadowOAuthApp, type ShadowOAuthConsent, type ShadowOAuthToken, type ShadowOrder, type ShadowProduct, type ShadowRemoteChannel, type ShadowRemoteConfig, type ShadowRemoteServer, type ShadowReview, type ShadowServer, type ShadowServerAccess, type ShadowServerJoinRequestResult, type ShadowServerJoinRequestStatus, type ShadowShop, type ShadowSlashCommand, ShadowSocket, type ShadowSocketOptions, type ShadowTask, type ShadowThread, type ShadowTransaction, type ShadowUsageProviderSnapshot, type ShadowUser, type ShadowWallet, type TypingPayload, channelRoom, threadRoom, userRoom };
+export { type ChannelCreatedPayload, type ChannelMemberAddedPayload, type ChannelMemberRemovedPayload, type ClientEventMap, type MemberJoinPayload, type MemberLeavePayload, type MessageDeletedPayload, type PolicyChangedPayload, type PresenceActivityPayload, type PresenceChangePayload, type ReactionPayload, type ServerEventMap, type ServerJoinedPayload, type ShadowAddAgentsToServerResult, type ShadowAgentUsageSnapshotInput, type ShadowAttachment, type ShadowCartItem, type ShadowCategory, type ShadowChannel, type ShadowChannelAccess, type ShadowChannelBootstrap, type ShadowChannelJoinRequestResult, type ShadowChannelJoinRequestStatus, type ShadowChannelPolicy, type ShadowChannelSlashCommand, ShadowClient, type ShadowCloudDeploymentBackup, type ShadowCloudDeploymentRuntimeResponse, type ShadowCloudDeploymentStatus, type ShadowCloudProviderCatalog, type ShadowCloudProviderEnvVar, type ShadowCloudProviderModel, type ShadowCloudProviderProfile, type ShadowContract, type ShadowDiyCloudRun, type ShadowDiyCloudRunEvent, type ShadowDiyCloudRunStatus, type ShadowFriendship, type ShadowInteractiveActionInput, type ShadowInteractiveActionResult, type ShadowInteractiveBlock, type ShadowInteractiveResponse, type ShadowInteractiveState, type ShadowInteractiveSubmissionPending, type ShadowInviteCode, type ShadowListing, type ShadowMediaVariant, type ShadowMember, type ShadowMentionSuggestion, type ShadowMentionSuggestionTrigger, type ShadowMessage, type ShadowMessageMention, type ShadowModelProxyBilling, type ShadowModelProxyChatCompletionRequest, type ShadowModelProxyChatCompletionResponse, type ShadowModelProxyModel, type ShadowModelProxyModelsResponse, type ShadowNotification, type ShadowNotificationPreferences, type ShadowOAuthApp, type ShadowOAuthConsent, type ShadowOAuthToken, type ShadowOrder, type ShadowProduct, type ShadowRemoteChannel, type ShadowRemoteConfig, type ShadowRemoteServer, type ShadowReview, type ShadowServer, type ShadowServerAccess, type ShadowServerAppCatalogEntry, type ShadowServerAppCommand, type ShadowServerAppDiscovery, type ShadowServerAppIntegration, type ShadowServerAppLaunchContext, type ShadowServerAppManifest, type ShadowServerAppSkillDocument, type ShadowServerAppTokenIntrospection, type ShadowServerJoinRequestResult, type ShadowServerJoinRequestStatus, type ShadowShop, type ShadowSlashCommand, ShadowSocket, type ShadowSocketOptions, type ShadowTask, type ShadowThread, type ShadowTransaction, type ShadowUsageProviderSnapshot, type ShadowUser, type ShadowWallet, type TypingPayload, channelRoom, threadRoom, userRoom };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { MessageMention, MentionSuggestionTrigger, MentionSuggestion } from '@shadowob/shared';
+import { MessageMention, OAuthLinkCard, MentionSuggestionTrigger, MentionSuggestion } from '@shadowob/shared';
 export { CLIENT_EVENTS, ClientEvent, SERVER_EVENTS, ServerEvent } from '@shadowob/shared';
 import { Socket } from 'socket.io-client';
 
@@ -94,6 +94,7 @@ interface ShadowMessageMetadata {
     interactiveResponse?: ShadowInteractiveResponse;
     interactiveState?: ShadowInteractiveState;
     commerceCards?: Array<ShadowCommerceProductCard | ShadowCommerceOfferCardInput>;
+    oauthLinkCards?: ShadowOAuthLinkCard[];
     [key: string]: unknown;
 }
 interface ShadowCommerceOfferCardInput {
@@ -102,6 +103,7 @@ interface ShadowCommerceOfferCardInput {
     offerId: string;
 }
 type ShadowMessageMention = MessageMention;
+type ShadowOAuthLinkCard = OAuthLinkCard;
 type ShadowMentionSuggestion = MentionSuggestion;
 type ShadowMentionSuggestionTrigger = MentionSuggestionTrigger;
 interface ShadowAttachment {
@@ -118,6 +120,149 @@ interface ShadowSignedMediaUrl {
     url: string;
     expiresAt: string;
 }
+type ShadowMediaVariant = 'avatar' | 'preview' | 'banner';
+type ShadowServerAppAction = 'read' | 'write' | 'manage' | 'delete' | 'generate';
+type ShadowServerAppDataClass = 'public' | 'server-private' | 'channel-private' | 'financial' | 'secret' | 'cloud-secret';
+interface ShadowServerAppCommand {
+    name: string;
+    title?: string;
+    description?: string;
+    path: string;
+    method?: 'POST';
+    input?: 'json' | 'multipart';
+    inputSchema?: Record<string, unknown>;
+    permission: string;
+    action: ShadowServerAppAction;
+    dataClass: ShadowServerAppDataClass;
+    approvalMode?: 'none' | 'first_time' | 'every_time' | 'policy';
+    binary?: {
+        supported?: boolean;
+        field?: string;
+        maxBytes?: number;
+        contentTypes?: string[];
+    };
+}
+interface ShadowServerAppManifest {
+    schemaVersion: 'shadow.app/1';
+    appKey: string;
+    name: string;
+    description?: string;
+    version?: string;
+    iconUrl: string;
+    iframe?: {
+        entry: string;
+        allowedOrigins: string[];
+    };
+    api: {
+        baseUrl: string;
+        auth?: {
+            type: 'oauth2-bearer';
+        };
+    };
+    commands: ShadowServerAppCommand[];
+    skills?: Array<{
+        name: string;
+        description: string;
+        commandHints?: string[];
+    }>;
+    events?: string[];
+    binary?: {
+        supported: boolean;
+        maxBytes?: number;
+        contentTypes?: string[];
+    };
+}
+interface ShadowServerAppIntegration {
+    id: string;
+    serverId: string;
+    appKey: string;
+    name: string;
+    description?: string | null;
+    iconUrl?: string | null;
+    manifestUrl?: string | null;
+    manifest: ShadowServerAppManifest;
+    iframeEntry?: string | null;
+    allowedOrigins: string[];
+    apiBaseUrl: string;
+    status: string;
+    installedByUserId: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface ShadowServerAppDiscovery {
+    manifest: ShadowServerAppManifest;
+    installed: ShadowServerAppIntegration | null;
+    permissions: Array<{
+        name: string;
+        title: string;
+        description?: string | null;
+        permission: string;
+        action: ShadowServerAppAction;
+        dataClass: ShadowServerAppDataClass;
+        approvalMode: 'none' | 'first_time' | 'every_time' | 'policy';
+    }>;
+}
+interface ShadowServerAppCatalogEntry {
+    id: string;
+    appKey: string;
+    name: string;
+    description?: string | null;
+    iconUrl?: string | null;
+    manifestUrl?: string | null;
+    manifest: ShadowServerAppManifest;
+    status: string;
+    installed?: ShadowServerAppIntegration | null;
+    permissions?: ShadowServerAppDiscovery['permissions'];
+    createdAt: string;
+    updatedAt: string;
+}
+interface ShadowServerAppLaunchContext {
+    serverId: string;
+    serverAppId: string;
+    appKey: string;
+    iframeEntry: string | null;
+    allowedOrigins: string[];
+    launchToken: string;
+    eventStreamPath: string;
+    expiresIn: number;
+}
+interface ShadowServerAppSkillDocument {
+    appKey: string;
+    markdown: string;
+    skills: Array<{
+        name: string;
+        description: string;
+        commandHints?: string[];
+    }>;
+}
+interface ShadowServerAppTokenIntrospection {
+    active: boolean;
+    token_type?: 'Bearer';
+    iss?: string;
+    aud?: string;
+    sub?: string;
+    scope?: string;
+    client_id?: string;
+    exp?: number;
+    iat?: number;
+    shadow?: {
+        protocol: 'shadow.app/1';
+        serverId: string;
+        serverAppId: string;
+        appKey: string;
+        command?: string;
+        actor: {
+            kind?: string;
+            userId?: string | null;
+            buddyAgentId?: string | null;
+            ownerId?: string | null;
+        };
+        channelId?: string | null;
+        permission?: string;
+        action?: string;
+        dataClass?: string;
+    };
+}
 interface ShadowChannel {
     id: string;
     name: string;
@@ -215,7 +360,6 @@ interface ShadowServer {
     description: string | null;
     iconUrl: string | null;
     bannerUrl: string | null;
-    homepageHtml: string | null;
     isPublic: boolean;
 }
 interface ShadowUser {
@@ -385,7 +529,15 @@ interface ShadowChannelPolicy {
     listen: boolean;
     reply: boolean;
     mentionOnly: boolean;
-    config: Record<string, unknown>;
+    config: ShadowChannelPolicyConfig;
+}
+interface ShadowChannelPolicyConfig {
+    allowedTriggerUserIds?: string[];
+    triggerUserIds?: string[];
+    ownerId?: string;
+    activeTenantIds?: string[];
+    replyRequiresMention?: boolean;
+    [key: string]: unknown;
 }
 interface ShadowSlashCommand {
     name: string;
@@ -401,6 +553,20 @@ interface ShadowChannelSlashCommand extends ShadowSlashCommand {
     botUsername: string;
     botDisplayName?: string | null;
 }
+interface ShadowChannelBootstrap {
+    access: ShadowChannelAccess;
+    channel: ShadowChannel;
+    server: ShadowServer | null;
+    channels: ShadowChannel[];
+    members: ShadowMember[];
+    messages: {
+        messages: ShadowMessage[];
+        hasMore: boolean;
+    };
+    slashCommands: {
+        commands: ShadowChannelSlashCommand[];
+    };
+}
 interface ShadowRemoteChannel {
     id: string;
     name: string;
@@ -418,6 +584,11 @@ interface ShadowRemoteServer {
 interface ShadowRemoteConfig {
     agentId: string;
     botUserId: string;
+    ownerId?: string;
+    buddyMode?: 'private' | 'shareable';
+    allowedServerIds?: string[];
+    activeTenantIds?: string[];
+    allowedTriggerUserIds?: string[];
     slashCommands?: ShadowSlashCommand[];
     servers: ShadowRemoteServer[];
 }
@@ -1426,10 +1597,15 @@ declare class ShadowClient {
     getOfficialModelProxyBilling(): Promise<ShadowModelProxyBilling>;
     createOfficialChatCompletion(data: ShadowModelProxyChatCompletionRequest): Promise<ShadowModelProxyChatCompletionResponse>;
     createOfficialChatCompletionStream(data: ShadowModelProxyChatCompletionRequest): Promise<Response>;
-    listAgents(): Promise<{
+    listAgents(options?: {
+        includeRentals?: boolean;
+    }): Promise<{
         id: string;
-        name: string;
+        name?: string;
         status: string;
+        accessRole?: 'owner' | 'tenant';
+        activeContractId?: string | null;
+        config?: Record<string, unknown>;
     }[]>;
     createAgent(data: {
         name: string;
@@ -1439,6 +1615,8 @@ declare class ShadowClient {
         avatarUrl?: string | null;
         kernelType?: string;
         config?: Record<string, unknown>;
+        buddyMode?: 'private' | 'shareable';
+        allowedServerIds?: string[];
     }): Promise<{
         id: string;
         token: string;
@@ -1454,6 +1632,8 @@ declare class ShadowClient {
         name?: string;
         displayName?: string;
         avatarUrl?: string | null;
+        buddyMode?: 'private' | 'shareable';
+        allowedServerIds?: string[];
     }): Promise<{
         id: string;
         name: string;
@@ -1524,14 +1704,50 @@ declare class ShadowClient {
     listServers(): Promise<ShadowServer[]>;
     getServer(serverIdOrSlug: string): Promise<ShadowServer>;
     getServerAccess(serverIdOrSlug: string): Promise<ShadowServerAccess>;
+    listServerApps(serverIdOrSlug: string): Promise<ShadowServerAppIntegration[]>;
+    listServerAppCatalog(serverIdOrSlug: string): Promise<ShadowServerAppCatalogEntry[]>;
+    discoverServerApp(serverIdOrSlug: string, data: {
+        manifestUrl?: string;
+        manifest?: ShadowServerAppManifest;
+    }): Promise<ShadowServerAppDiscovery>;
+    installServerApp(serverIdOrSlug: string, data: {
+        manifestUrl?: string;
+        manifest?: ShadowServerAppManifest;
+    }): Promise<ShadowServerAppIntegration>;
+    installServerAppFromCatalog(serverIdOrSlug: string, catalogEntryId: string, data?: Record<string, never>): Promise<ShadowServerAppIntegration>;
+    getServerApp(serverIdOrSlug: string, appKey: string): Promise<ShadowServerAppIntegration & {
+        grants?: Record<string, unknown>[];
+    }>;
+    deleteServerApp(serverIdOrSlug: string, appKey: string): Promise<{
+        ok: boolean;
+    }>;
+    grantServerAppToBuddy(serverIdOrSlug: string, appKey: string, data: {
+        buddyAgentId: string;
+        permissions: string[];
+        resourceRules?: Record<string, unknown>;
+        approvalMode?: 'none' | 'first_time' | 'every_time' | 'policy';
+        expiresAt?: string;
+    }): Promise<Record<string, unknown>>;
+    getServerAppSkills(serverIdOrSlug: string, appKey: string): Promise<ShadowServerAppSkillDocument>;
+    createServerAppLaunch(serverIdOrSlug: string, appKey: string): Promise<ShadowServerAppLaunchContext>;
+    introspectServerAppToken(serverIdOrSlug: string, appKey: string, token: string): Promise<ShadowServerAppTokenIntrospection>;
+    callServerAppCommand(serverIdOrSlug: string, appKey: string, commandName: string, data?: {
+        input?: unknown;
+        channelId?: string;
+    }): Promise<unknown>;
+    callServerAppCommandMultipart(serverIdOrSlug: string, appKey: string, commandName: string, data: {
+        input?: unknown;
+        channelId?: string;
+        file: Blob;
+        filename: string;
+        field?: string;
+    }): Promise<unknown>;
     updateServer(serverIdOrSlug: string, data: {
         name?: string;
         description?: string | null;
         slug?: string | null;
-        homepageHtml?: string | null;
         isPublic?: boolean;
     }): Promise<ShadowServer>;
-    updateServerHomepage(serverIdOrSlug: string, homepageHtml: string | null): Promise<ShadowServer>;
     deleteServer(serverId: string): Promise<{
         success: boolean;
     }>;
@@ -1564,6 +1780,9 @@ declare class ShadowClient {
         isPrivate?: boolean;
     }): Promise<ShadowChannel>;
     getChannel(channelId: string): Promise<ShadowChannel>;
+    getChannelBootstrap(channelId: string, options?: {
+        messagesLimit?: number;
+    }): Promise<ShadowChannelBootstrap>;
     getChannelAccess(channelId: string): Promise<ShadowChannelAccess>;
     getChannelMembers(channelId: string): Promise<ShadowMember[]>;
     updateChannel(channelId: string, data: {
@@ -1699,6 +1918,11 @@ declare class ShadowClient {
     }>;
     resolveAttachmentMediaUrl(attachmentId: string, options?: {
         disposition?: 'inline' | 'attachment';
+        variant?: ShadowMediaVariant;
+    }): Promise<ShadowSignedMediaUrl>;
+    resolveWorkspaceMediaUrl(serverId: string, fileId: string, options?: {
+        disposition?: 'inline' | 'attachment';
+        contentRef?: string;
     }): Promise<ShadowSignedMediaUrl>;
     /**
      * Download a file from a URL and upload it to the Shadow media service.
@@ -1788,11 +2012,28 @@ declare class ShadowClient {
     listOAuthAccounts(): Promise<{
         id: string;
         provider: string;
-        providerAccountId: string;
+        providerEmail: string | null;
+        createdAt: string;
     }[]>;
+    createOAuthConnectUrl(provider: 'google' | 'github', redirect?: string): Promise<{
+        url: string;
+    }>;
     unlinkOAuthAccount(accountId: string): Promise<{
         success: boolean;
     }>;
+    listAuthSessions(): Promise<Array<{
+        id: string;
+        deviceName: string | null;
+        userAgent: string | null;
+        ipAddress: string | null;
+        lastSeenAt: string;
+        createdAt: string;
+        revokedAt: string | null;
+        current: boolean;
+    }>>;
+    revokeAuthSession(sessionId: string): Promise<{
+        ok: boolean;
+    }>;
     changePassword(data: {
         currentPassword: string;
         newPassword: string;
@@ -1883,6 +2124,18 @@ declare class ShadowClient {
     revokeOAuthConsent(appId: string): Promise<{
         success: boolean;
     }>;
+    sendOAuthChannelMessage(channelId: string, content: string, opts?: {
+        metadata?: {
+            oauthLinkCards?: ShadowOAuthLinkCard[];
+        };
+    }): Promise<ShadowMessage>;
+    sendOAuthBuddyMessage(buddyId: string, data: {
+        channelId: string;
+        content: string;
+        metadata?: {
+            oauthLinkCards?: ShadowOAuthLinkCard[];
+        };
+    }): Promise<ShadowMessage>;
     browseListings(params?: {
         search?: string;
         tags?: string[];
@@ -2502,4 +2755,4 @@ declare class ShadowSocket {
     updateActivity(channelId: string, activity: string | null): void;
 }
 
-export { type ChannelCreatedPayload, type ChannelMemberAddedPayload, type ChannelMemberRemovedPayload, type ClientEventMap, type MemberJoinPayload, type MemberLeavePayload, type MessageDeletedPayload, type PolicyChangedPayload, type PresenceActivityPayload, type PresenceChangePayload, type ReactionPayload, type ServerEventMap, type ServerJoinedPayload, type ShadowAddAgentsToServerResult, type ShadowAgentUsageSnapshotInput, type ShadowAttachment, type ShadowCartItem, type ShadowCategory, type ShadowChannel, type ShadowChannelAccess, type ShadowChannelJoinRequestResult, type ShadowChannelJoinRequestStatus, type ShadowChannelPolicy, type ShadowChannelSlashCommand, ShadowClient, type ShadowCloudDeploymentBackup, type ShadowCloudDeploymentRuntimeResponse, type ShadowCloudDeploymentStatus, type ShadowCloudProviderCatalog, type ShadowCloudProviderEnvVar, type ShadowCloudProviderModel, type ShadowCloudProviderProfile, type ShadowContract, type ShadowDiyCloudRun, type ShadowDiyCloudRunEvent, type ShadowDiyCloudRunStatus, type ShadowFriendship, type ShadowInteractiveActionInput, type ShadowInteractiveActionResult, type ShadowInteractiveBlock, type ShadowInteractiveResponse, type ShadowInteractiveState, type ShadowInteractiveSubmissionPending, type ShadowInviteCode, type ShadowListing, type ShadowMember, type ShadowMentionSuggestion, type ShadowMentionSuggestionTrigger, type ShadowMessage, type ShadowMessageMention, type ShadowModelProxyBilling, type ShadowModelProxyChatCompletionRequest, type ShadowModelProxyChatCompletionResponse, type ShadowModelProxyModel, type ShadowModelProxyModelsResponse, type ShadowNotification, type ShadowNotificationPreferences, type ShadowOAuthApp, type ShadowOAuthConsent, type ShadowOAuthToken, type ShadowOrder, type ShadowProduct, type ShadowRemoteChannel, type ShadowRemoteConfig, type ShadowRemoteServer, type ShadowReview, type ShadowServer, type ShadowServerAccess, type ShadowServerJoinRequestResult, type ShadowServerJoinRequestStatus, type ShadowShop, type ShadowSlashCommand, ShadowSocket, type ShadowSocketOptions, type ShadowTask, type ShadowThread, type ShadowTransaction, type ShadowUsageProviderSnapshot, type ShadowUser, type ShadowWallet, type TypingPayload, channelRoom, threadRoom, userRoom };
+export { type ChannelCreatedPayload, type ChannelMemberAddedPayload, type ChannelMemberRemovedPayload, type ClientEventMap, type MemberJoinPayload, type MemberLeavePayload, type MessageDeletedPayload, type PolicyChangedPayload, type PresenceActivityPayload, type PresenceChangePayload, type ReactionPayload, type ServerEventMap, type ServerJoinedPayload, type ShadowAddAgentsToServerResult, type ShadowAgentUsageSnapshotInput, type ShadowAttachment, type ShadowCartItem, type ShadowCategory, type ShadowChannel, type ShadowChannelAccess, type ShadowChannelBootstrap, type ShadowChannelJoinRequestResult, type ShadowChannelJoinRequestStatus, type ShadowChannelPolicy, type ShadowChannelSlashCommand, ShadowClient, type ShadowCloudDeploymentBackup, type ShadowCloudDeploymentRuntimeResponse, type ShadowCloudDeploymentStatus, type ShadowCloudProviderCatalog, type ShadowCloudProviderEnvVar, type ShadowCloudProviderModel, type ShadowCloudProviderProfile, type ShadowContract, type ShadowDiyCloudRun, type ShadowDiyCloudRunEvent, type ShadowDiyCloudRunStatus, type ShadowFriendship, type ShadowInteractiveActionInput, type ShadowInteractiveActionResult, type ShadowInteractiveBlock, type ShadowInteractiveResponse, type ShadowInteractiveState, type ShadowInteractiveSubmissionPending, type ShadowInviteCode, type ShadowListing, type ShadowMediaVariant, type ShadowMember, type ShadowMentionSuggestion, type ShadowMentionSuggestionTrigger, type ShadowMessage, type ShadowMessageMention, type ShadowModelProxyBilling, type ShadowModelProxyChatCompletionRequest, type ShadowModelProxyChatCompletionResponse, type ShadowModelProxyModel, type ShadowModelProxyModelsResponse, type ShadowNotification, type ShadowNotificationPreferences, type ShadowOAuthApp, type ShadowOAuthConsent, type ShadowOAuthToken, type ShadowOrder, type ShadowProduct, type ShadowRemoteChannel, type ShadowRemoteConfig, type ShadowRemoteServer, type ShadowReview, type ShadowServer, type ShadowServerAccess, type ShadowServerAppCatalogEntry, type ShadowServerAppCommand, type ShadowServerAppDiscovery, type ShadowServerAppIntegration, type ShadowServerAppLaunchContext, type ShadowServerAppManifest, type ShadowServerAppSkillDocument, type ShadowServerAppTokenIntrospection, type ShadowServerJoinRequestResult, type ShadowServerJoinRequestStatus, type ShadowShop, type ShadowSlashCommand, ShadowSocket, type ShadowSocketOptions, type ShadowTask, type ShadowThread, type ShadowTransaction, type ShadowUsageProviderSnapshot, type ShadowUser, type ShadowWallet, type TypingPayload, channelRoom, threadRoom, userRoom };

package/dist/index.js

@@ -45,12 +45,13 @@ var ShadowClient = class {
     const url = `${this.baseUrl}${path}`;
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), 6e4);
+    const isFormData = init?.body instanceof FormData;
     try {
       const res = await fetch(url, {
         ...init,
         signal: init?.signal ?? controller.signal,
         headers: {
-          "Content-Type": "application/json",
+          ...!isFormData ? { "Content-Type": "application/json" } : {},
           Authorization: `Bearer ${this.token}`,
           ...init?.headers
         }
@@ -175,8 +176,11 @@ var ShadowClient = class {
     });
   }
   // ── Agents ────────────────────────────────────────────────────────────
-  async listAgents() {
-    return this.request("/api/agents");
+  async listAgents(options) {
+    const params = new URLSearchParams();
+    if (options?.includeRentals) params.set("includeRentals", "true");
+    const query = params.toString();
+    return this.request(`/api/agents${query ? `?${query}` : ""}`);
   }
   async createAgent(data) {
     return this.request("/api/agents", {
@@ -292,15 +296,113 @@ var ShadowClient = class {
   async getServerAccess(serverIdOrSlug) {
     return this.request(`/api/servers/${serverIdOrSlug}/access`);
   }
+  // ── Server App Integrations ───────────────────────────────────────────
+  async listServerApps(serverIdOrSlug) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps`);
+  }
+  async listServerAppCatalog(serverIdOrSlug) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/catalog`);
+  }
+  async discoverServerApp(serverIdOrSlug, data) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/discover`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
+  async installServerApp(serverIdOrSlug, data) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
+  async installServerAppFromCatalog(serverIdOrSlug, catalogEntryId, data = {}) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/catalog/${encodeURIComponent(catalogEntryId)}/install`,
+      {
+        method: "POST",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  async getServerApp(serverIdOrSlug, appKey) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}`);
+  }
+  async deleteServerApp(serverIdOrSlug, appKey) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}`, {
+      method: "DELETE"
+    });
+  }
+  async grantServerAppToBuddy(serverIdOrSlug, appKey, data) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/grants`,
+      {
+        method: "POST",
+        body: JSON.stringify(data)
+      }
+    );
+  }
+  async getServerAppSkills(serverIdOrSlug, appKey) {
+    return this.request(`/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/skills`);
+  }
+  async createServerAppLaunch(serverIdOrSlug, appKey) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/launch`,
+      {
+        method: "POST"
+      }
+    );
+  }
+  async introspectServerAppToken(serverIdOrSlug, appKey, token) {
+    const url = `${this.baseUrl}/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(
+      appKey
+    )}/oauth/introspect`;
+    const res = await fetch(url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ token })
+    });
+    if (!res.ok) {
+      const body = await res.text().catch(() => "");
+      const message = sanitizeErrorBody(body);
+      throw new Error(`Shadow API POST /oauth/introspect failed (${res.status}): ${message}`);
+    }
+    return await res.json();
+  }
+  async callServerAppCommand(serverIdOrSlug, appKey, commandName, data) {
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/commands/${encodeURIComponent(
+        commandName
+      )}`,
+      {
+        method: "POST",
+        body: JSON.stringify(data ?? {})
+      }
+    );
+  }
+  async callServerAppCommandMultipart(serverIdOrSlug, appKey, commandName, data) {
+    const form = new FormData();
+    form.set("input", JSON.stringify(data.input ?? {}));
+    if (data.channelId) form.set("channelId", data.channelId);
+    form.set(data.field ?? "file", data.file, data.filename);
+    return this.request(
+      `/api/servers/${serverIdOrSlug}/apps/${encodeURIComponent(appKey)}/commands/${encodeURIComponent(
+        commandName
+      )}`,
+      {
+        method: "POST",
+        body: form
+      }
+    );
+  }
   async updateServer(serverIdOrSlug, data) {
     return this.request(`/api/servers/${serverIdOrSlug}`, {
       method: "PATCH",
       body: JSON.stringify(data)
     });
   }
-  async updateServerHomepage(serverIdOrSlug, homepageHtml) {
-    return this.updateServer(serverIdOrSlug, { homepageHtml });
-  }
   async deleteServer(serverId) {
     return this.request(`/api/servers/${serverId}`, { method: "DELETE" });
   }
@@ -365,6 +467,14 @@ var ShadowClient = class {
     const ch = await this.request(`/api/channels/${channelId}`);
     return { ...ch, description: ch.topic };
   }
+  async getChannelBootstrap(channelId, options) {
+    const params = new URLSearchParams();
+    if (options?.messagesLimit) params.set("messagesLimit", String(options.messagesLimit));
+    const query = params.toString();
+    return this.request(
+      `/api/channels/${channelId}/bootstrap${query ? `?${query}` : ""}`
+    );
+  }
   async getChannelAccess(channelId) {
     return this.request(`/api/channels/${channelId}/access`);
   }
@@ -628,9 +738,19 @@ var ShadowClient = class {
     return res.json();
   }
   async resolveAttachmentMediaUrl(attachmentId, options) {
-    const disposition = options?.disposition ?? "inline";
+    const params = new URLSearchParams();
+    params.set("disposition", options?.disposition ?? "inline");
+    if (options?.variant) params.set("variant", options.variant);
+    return this.request(
+      `/api/attachments/${attachmentId}/media-url?${params}`
+    );
+  }
+  async resolveWorkspaceMediaUrl(serverId, fileId, options) {
+    const params = new URLSearchParams();
+    params.set("disposition", options?.disposition ?? "inline");
+    if (options?.contentRef) params.set("contentRef", options.contentRef);
     return this.request(
-      `/api/attachments/${attachmentId}/media-url?disposition=${disposition}`
+      `/api/servers/${serverId}/workspace/files/${fileId}/media-url?${params}`
     );
   }
   /**
@@ -856,9 +976,21 @@ var ShadowClient = class {
   async listOAuthAccounts() {
     return this.request("/api/auth/oauth/accounts");
   }
+  async createOAuthConnectUrl(provider, redirect) {
+    return this.request(`/api/auth/oauth/${provider}/link`, {
+      method: "POST",
+      body: JSON.stringify({ redirect })
+    });
+  }
   async unlinkOAuthAccount(accountId) {
     return this.request(`/api/auth/oauth/accounts/${accountId}`, { method: "DELETE" });
   }
+  async listAuthSessions() {
+    return this.request("/api/auth/sessions");
+  }
+  async revokeAuthSession(sessionId) {
+    return this.request(`/api/auth/sessions/${sessionId}`, { method: "DELETE" });
+  }
   async changePassword(data) {
     return this.request("/api/auth/password", {
       method: "PUT",
@@ -986,6 +1118,21 @@ var ShadowClient = class {
       body: JSON.stringify({ appId })
     });
   }
+  async sendOAuthChannelMessage(channelId, content, opts) {
+    return this.request(`/api/oauth/channels/${channelId}/messages`, {
+      method: "POST",
+      body: JSON.stringify({
+        content,
+        ...opts?.metadata ? { metadata: opts.metadata } : {}
+      })
+    });
+  }
+  async sendOAuthBuddyMessage(buddyId, data) {
+    return this.request(`/api/oauth/buddies/${buddyId}/messages`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
   // ── Marketplace / Rentals ─────────────────────────────────────────────
   async browseListings(params) {
     const qs = new URLSearchParams();

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@shadowob/sdk",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "description": "Shadow SDK — typed REST client and real-time Socket.IO event listener for Shadow servers",
+  "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -21,7 +22,7 @@
   ],
   "dependencies": {
     "socket.io-client": "^4.8.1",
-    "@shadowob/shared": "1.1.3"
+    "@shadowob/shared": "1.1.4"
   },
   "devDependencies": {
     "tsup": "^8.5.0",