@soat/sdk 0.14.10 → 0.14.12

package/dist/index.d.cts

@@ -681,6 +681,10 @@ type CreateAgentGenerationRequest = {
    * Logical action label recorded on the generation's usage meter, so spend can be rolled up per action (e.g. an A/B/C/D operating action).
    */
   action_id?: string;
+  /**
+   * Per-turn override of the agent's `knowledge_config.extraction` default. Omit to follow the agent's stored config. Set `false` to suppress automatic memory extraction for this turn (e.g. an operational or tool-listing turn that would only add noise to a curated memory). Set `true` to force extraction on for this turn even when the agent does not enable it by default, provided the agent has a `write_memory_id`. Has no effect on streaming or `requires_action` turns, which never extract.
+   */
+  extract?: boolean;
   /**
    * Per-generation knowledge retrieval override. Array filters (memory_ids, memory_tags, document_ids, document_paths) are unioned with the agent's stored knowledge_config; scalar fields (min_score, limit) use the per-generation value when present.
    */
@@ -1138,6 +1142,10 @@ type DiscussionRecord = {
     [key: string]: string;
   };
   participants?: Array<ParticipantRecord>;
+  /**
+   * Non-blocking warnings for participant/synthesis prompt `{token}` references outside the allowlist ({topic}, {transcript}, {steps.deliberation}, {steps.deliberation.last}). Unknown tokens are not rejected — they pass through unresolved — so this is informational only.
+   */
+  template_warnings?: Array<string>;
   created_at?: Date;
   updated_at?: Date;
 };
@@ -1705,6 +1713,10 @@ type ToolResourceProperties = {
    * Allowlist of actions the tool exposes. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
    */
   actions?: Array<string> | null;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it — the ergonomic way to scope a read+write MCP server read-only by denying just the write tools. `null` denies nothing.
+   */
+  denied_actions?: Array<string> | null;
   /**
    * Pre-filled parameter values injected at execution time
    */
@@ -2558,10 +2570,11 @@ type OrchestrationNode = {
     [key: string]: unknown;
   };
   /**
-   * Maps node artifact keys to state paths.
+   * Maps state write paths to values. Each key is a `state.<path>` destination (the `state.` prefix is optional); each value is JSON Logic (https://jsonlogic.com) evaluated against `{ "output": <node artifact>, "state": <run state> }` — e.g. `{ "summary": {"var": "output.content"} }` writes the artifact's `content` field to `state.summary`. The same evaluator as input_mapping/transform/condition; only the context differs.
+   *
    */
-  output_mapping?: {
-    [key: string]: string;
+  state_mapping?: {
+    [key: string]: unknown;
   };
   /**
    * For agent nodes — JSON Schema for structured output parsing.
@@ -3241,6 +3254,10 @@ type Tool = {
    * Allowlist of actions to expose. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
    */
   actions?: Array<string> | null;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it — a name in both lists is denied. This is the ergonomic way to scope a read+write MCP server read-only: deny just the write tools instead of enumerating every read tool in `actions`. Names not listed are exposed. `null` (default) denies nothing. Ignored for other tool types.
+   */
+  denied_actions?: Array<string> | null;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
@@ -3306,6 +3323,10 @@ type CreateToolRequest = {
    * Allowlist of actions. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
    */
   actions?: Array<string>;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it. Use it to scope a read+write MCP server read-only by denying just the write tools. Omit or set `null` to deny nothing. Ignored for other tool types.
+   */
+  denied_actions?: Array<string>;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
@@ -3350,6 +3371,10 @@ type UpdateToolRequest = {
    * Allowlist of actions. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
    */
   actions?: Array<string> | null;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it. Use it to scope a read+write MCP server read-only by denying just the write tools. `null` denies nothing. Ignored for other tool types.
+   */
+  denied_actions?: Array<string> | null;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
@@ -3375,7 +3400,7 @@ type UpdateToolRequest = {
 };
 type CallToolRequest = {
   /**
-   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set). Ignored for `http` tools.
+   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set, and must not be in its `denied_actions` denylist). Ignored for `http` tools.
    *
    */
   action?: string;

package/dist/index.d.mts

@@ -681,6 +681,10 @@ type CreateAgentGenerationRequest = {
    * Logical action label recorded on the generation's usage meter, so spend can be rolled up per action (e.g. an A/B/C/D operating action).
    */
   action_id?: string;
+  /**
+   * Per-turn override of the agent's `knowledge_config.extraction` default. Omit to follow the agent's stored config. Set `false` to suppress automatic memory extraction for this turn (e.g. an operational or tool-listing turn that would only add noise to a curated memory). Set `true` to force extraction on for this turn even when the agent does not enable it by default, provided the agent has a `write_memory_id`. Has no effect on streaming or `requires_action` turns, which never extract.
+   */
+  extract?: boolean;
   /**
    * Per-generation knowledge retrieval override. Array filters (memory_ids, memory_tags, document_ids, document_paths) are unioned with the agent's stored knowledge_config; scalar fields (min_score, limit) use the per-generation value when present.
    */
@@ -1138,6 +1142,10 @@ type DiscussionRecord = {
     [key: string]: string;
   };
   participants?: Array<ParticipantRecord>;
+  /**
+   * Non-blocking warnings for participant/synthesis prompt `{token}` references outside the allowlist ({topic}, {transcript}, {steps.deliberation}, {steps.deliberation.last}). Unknown tokens are not rejected — they pass through unresolved — so this is informational only.
+   */
+  template_warnings?: Array<string>;
   created_at?: Date;
   updated_at?: Date;
 };
@@ -1705,6 +1713,10 @@ type ToolResourceProperties = {
    * Allowlist of actions the tool exposes. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
    */
   actions?: Array<string> | null;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it — the ergonomic way to scope a read+write MCP server read-only by denying just the write tools. `null` denies nothing.
+   */
+  denied_actions?: Array<string> | null;
   /**
    * Pre-filled parameter values injected at execution time
    */
@@ -2558,10 +2570,11 @@ type OrchestrationNode = {
     [key: string]: unknown;
   };
   /**
-   * Maps node artifact keys to state paths.
+   * Maps state write paths to values. Each key is a `state.<path>` destination (the `state.` prefix is optional); each value is JSON Logic (https://jsonlogic.com) evaluated against `{ "output": <node artifact>, "state": <run state> }` — e.g. `{ "summary": {"var": "output.content"} }` writes the artifact's `content` field to `state.summary`. The same evaluator as input_mapping/transform/condition; only the context differs.
+   *
    */
-  output_mapping?: {
-    [key: string]: string;
+  state_mapping?: {
+    [key: string]: unknown;
   };
   /**
    * For agent nodes — JSON Schema for structured output parsing.
@@ -3241,6 +3254,10 @@ type Tool = {
    * Allowlist of actions to expose. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
    */
   actions?: Array<string> | null;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it — a name in both lists is denied. This is the ergonomic way to scope a read+write MCP server read-only: deny just the write tools instead of enumerating every read tool in `actions`. Names not listed are exposed. `null` (default) denies nothing. Ignored for other tool types.
+   */
+  denied_actions?: Array<string> | null;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
@@ -3306,6 +3323,10 @@ type CreateToolRequest = {
    * Allowlist of actions. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
    */
   actions?: Array<string>;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it. Use it to scope a read+write MCP server read-only by denying just the write tools. Omit or set `null` to deny nothing. Ignored for other tool types.
+   */
+  denied_actions?: Array<string>;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
@@ -3350,6 +3371,10 @@ type UpdateToolRequest = {
    * Allowlist of actions. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
    */
   actions?: Array<string> | null;
+  /**
+   * For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it. Use it to scope a read+write MCP server read-only by denying just the write tools. `null` denies nothing. Ignored for other tool types.
+   */
+  denied_actions?: Array<string> | null;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
    */
@@ -3375,7 +3400,7 @@ type UpdateToolRequest = {
 };
 type CallToolRequest = {
   /**
-   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set). Ignored for `http` tools.
+   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set, and must not be in its `denied_actions` denylist). Ignored for `http` tools.
    *
    */
   action?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/sdk",
-  "version": "0.14.10",
+  "version": "0.14.12",
   "description": "TypeScript SDK for the SOAT API",
   "type": "module",
   "main": "dist/index.mjs",