@soat/sdk 0.15.6 → 0.15.7

package/dist/index.cjs

@@ -955,7 +955,7 @@ var ApiKeys = class {
 	/**
 	* Create an API key
 	*
-	* Creates a new API key for the authenticated user. - `project_id` is required: every key is scoped to exactly one project. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions, confined to the key's project.
+	* Creates a new API key for the authenticated user. - `project_id` is optional. When set, the key is scoped to that single project. When omitted or null, the key is **unscoped** and spans every project its owner can reach. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions (confined to the key's project when scoped).
 	*
 	*/
 	static createApiKey(options) {
@@ -993,7 +993,7 @@ var ApiKeys = class {
 	/**
 	* Update an API key
 	*
-	* Updates an API key's name, project scope, or policies. The project scope can be changed to another project but never cleared. Only the owner or an admin can update it.
+	* Updates an API key's name, project scope, or policies. The project scope can be changed to another project, set (scoping a previously unscoped key), or cleared with null (unscoping the key). Only the owner or an admin can update it.
 	*/
 	static updateApiKey(options) {
 		return (options.client ?? client).put({

package/dist/index.d.cts

@@ -920,9 +920,9 @@ type ApiKeyRecord = {
    */
   user_id?: string;
   /**
-   * The project this key is scoped to
+   * The project this key is scoped to, or null for an unscoped key that spans projects
    */
-  project_id?: string;
+  project_id?: string | null;
   /**
    * Public IDs of policies attached to this key
    */
@@ -949,6 +949,10 @@ type ApprovalItem = {
    */
   proposed_action?: {
     tool_id?: string;
+    /**
+     * Resolved action name (the soat/mcp action) for tool-call items; omitted for single-action tools
+     */
+    action?: string;
     arguments?: {
       [key: string]: unknown;
     };
@@ -987,6 +991,10 @@ type ApprovalItem = {
    * Originating generation (tool-call producer)
    */
   generation_id?: string | null;
+  /**
+   * Session the originating generation ran in (tool-call producer)
+   */
+  session_id?: string | null;
   /**
    * Proposing agent
    */
@@ -2458,7 +2466,8 @@ type Formation = {
    */
   status?: 'creating' | 'active' | 'updating' | 'failed' | 'deleting' | 'deleted' | 'delete_failed';
   /**
-   * Arbitrary metadata stored on the formation record (supplied at create/update).
+   * Static annotations stored on the formation record (supplied at create/update). Not a substitution site — `sub`/`param`/`ref` expressions are rejected. Use the template's top-level `metadata` block for deploy-time substitution (see `resolved_metadata`).
+   *
    */
   metadata?: {
     [key: string]: unknown;
@@ -5377,9 +5386,9 @@ type CreateApiKeyData = {
      */
     name: string;
     /**
-     * Project ID this key is scoped to. Required — keys cannot span projects.
+     * Optional project ID to scope the key to. Omit or set null to create an unscoped key that spans projects.
      */
-    project_id: string;
+    project_id?: string | null;
     /**
      * Optional list of policy IDs to attach. Key permissions become the intersection of user policies and these policies.
      */
@@ -5475,9 +5484,9 @@ type UpdateApiKeyData = {
   body: {
     name?: string;
     /**
-     * Re-scope the key to a different project. Cannot be null — keys are always project-scoped.
+     * Re-scope the key to a different project, or set null to clear the scope (unscoped key). Omit to leave the scope unchanged.
      */
-    project_id?: string;
+    project_id?: string | null;
     /**
      * Replace the key's policy list (empty array removes all)
      */
@@ -7929,6 +7938,10 @@ type CreateFormationData = {
     parameters?: {
       [key: string]: string;
     } | null;
+    /**
+     * Static annotations stored on the formation record. This field is NOT a substitution site: `sub`/`param`/`ref` expressions are rejected with 400 (`FORMATION_INVALID_METADATA`). For deploy-time substitution use the template's top-level `metadata` block, which is resolved into `resolved_metadata`.
+     *
+     */
     metadata?: {
       [key: string]: unknown;
     } | null;
@@ -8032,6 +8045,10 @@ type UpdateFormationData = {
     parameters?: {
       [key: string]: string;
     } | null;
+    /**
+     * Static annotations stored on the formation record. This field is NOT a substitution site: `sub`/`param`/`ref` expressions are rejected with 400 (`FORMATION_INVALID_METADATA`). For deploy-time substitution use the template's top-level `metadata` block, which is resolved into `resolved_metadata`.
+     *
+     */
     metadata?: {
       [key: string]: unknown;
     } | null;
@@ -11915,7 +11932,7 @@ declare class ApiKeys {
   /**
    * Create an API key
    *
-   * Creates a new API key for the authenticated user. - `project_id` is required: every key is scoped to exactly one project. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions, confined to the key's project.
+   * Creates a new API key for the authenticated user. - `project_id` is optional. When set, the key is scoped to that single project. When omitted or null, the key is **unscoped** and spans every project its owner can reach. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions (confined to the key's project when scoped).
    *
    */
   static createApiKey<ThrowOnError extends boolean = false>(options: Options<CreateApiKeyData, ThrowOnError>): RequestResult<CreateApiKeyResponses, CreateApiKeyErrors, ThrowOnError>;
@@ -11934,7 +11951,7 @@ declare class ApiKeys {
   /**
    * Update an API key
    *
-   * Updates an API key's name, project scope, or policies. The project scope can be changed to another project but never cleared. Only the owner or an admin can update it.
+   * Updates an API key's name, project scope, or policies. The project scope can be changed to another project, set (scoping a previously unscoped key), or cleared with null (unscoping the key). Only the owner or an admin can update it.
    */
   static updateApiKey<ThrowOnError extends boolean = false>(options: Options<UpdateApiKeyData, ThrowOnError>): RequestResult<UpdateApiKeyResponses, UpdateApiKeyErrors, ThrowOnError>;
 }

package/dist/index.d.mts

@@ -920,9 +920,9 @@ type ApiKeyRecord = {
    */
   user_id?: string;
   /**
-   * The project this key is scoped to
+   * The project this key is scoped to, or null for an unscoped key that spans projects
    */
-  project_id?: string;
+  project_id?: string | null;
   /**
    * Public IDs of policies attached to this key
    */
@@ -949,6 +949,10 @@ type ApprovalItem = {
    */
   proposed_action?: {
     tool_id?: string;
+    /**
+     * Resolved action name (the soat/mcp action) for tool-call items; omitted for single-action tools
+     */
+    action?: string;
     arguments?: {
       [key: string]: unknown;
     };
@@ -987,6 +991,10 @@ type ApprovalItem = {
    * Originating generation (tool-call producer)
    */
   generation_id?: string | null;
+  /**
+   * Session the originating generation ran in (tool-call producer)
+   */
+  session_id?: string | null;
   /**
    * Proposing agent
    */
@@ -2458,7 +2466,8 @@ type Formation = {
    */
   status?: 'creating' | 'active' | 'updating' | 'failed' | 'deleting' | 'deleted' | 'delete_failed';
   /**
-   * Arbitrary metadata stored on the formation record (supplied at create/update).
+   * Static annotations stored on the formation record (supplied at create/update). Not a substitution site — `sub`/`param`/`ref` expressions are rejected. Use the template's top-level `metadata` block for deploy-time substitution (see `resolved_metadata`).
+   *
    */
   metadata?: {
     [key: string]: unknown;
@@ -5377,9 +5386,9 @@ type CreateApiKeyData = {
      */
     name: string;
     /**
-     * Project ID this key is scoped to. Required — keys cannot span projects.
+     * Optional project ID to scope the key to. Omit or set null to create an unscoped key that spans projects.
      */
-    project_id: string;
+    project_id?: string | null;
     /**
      * Optional list of policy IDs to attach. Key permissions become the intersection of user policies and these policies.
      */
@@ -5475,9 +5484,9 @@ type UpdateApiKeyData = {
   body: {
     name?: string;
     /**
-     * Re-scope the key to a different project. Cannot be null — keys are always project-scoped.
+     * Re-scope the key to a different project, or set null to clear the scope (unscoped key). Omit to leave the scope unchanged.
      */
-    project_id?: string;
+    project_id?: string | null;
     /**
      * Replace the key's policy list (empty array removes all)
      */
@@ -7929,6 +7938,10 @@ type CreateFormationData = {
     parameters?: {
       [key: string]: string;
     } | null;
+    /**
+     * Static annotations stored on the formation record. This field is NOT a substitution site: `sub`/`param`/`ref` expressions are rejected with 400 (`FORMATION_INVALID_METADATA`). For deploy-time substitution use the template's top-level `metadata` block, which is resolved into `resolved_metadata`.
+     *
+     */
     metadata?: {
       [key: string]: unknown;
     } | null;
@@ -8032,6 +8045,10 @@ type UpdateFormationData = {
     parameters?: {
       [key: string]: string;
     } | null;
+    /**
+     * Static annotations stored on the formation record. This field is NOT a substitution site: `sub`/`param`/`ref` expressions are rejected with 400 (`FORMATION_INVALID_METADATA`). For deploy-time substitution use the template's top-level `metadata` block, which is resolved into `resolved_metadata`.
+     *
+     */
     metadata?: {
       [key: string]: unknown;
     } | null;
@@ -11915,7 +11932,7 @@ declare class ApiKeys {
   /**
    * Create an API key
    *
-   * Creates a new API key for the authenticated user. - `project_id` is required: every key is scoped to exactly one project. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions, confined to the key's project.
+   * Creates a new API key for the authenticated user. - `project_id` is optional. When set, the key is scoped to that single project. When omitted or null, the key is **unscoped** and spans every project its owner can reach. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions (confined to the key's project when scoped).
    *
    */
   static createApiKey<ThrowOnError extends boolean = false>(options: Options<CreateApiKeyData, ThrowOnError>): RequestResult<CreateApiKeyResponses, CreateApiKeyErrors, ThrowOnError>;
@@ -11934,7 +11951,7 @@ declare class ApiKeys {
   /**
    * Update an API key
    *
-   * Updates an API key's name, project scope, or policies. The project scope can be changed to another project but never cleared. Only the owner or an admin can update it.
+   * Updates an API key's name, project scope, or policies. The project scope can be changed to another project, set (scoping a previously unscoped key), or cleared with null (unscoping the key). Only the owner or an admin can update it.
    */
   static updateApiKey<ThrowOnError extends boolean = false>(options: Options<UpdateApiKeyData, ThrowOnError>): RequestResult<UpdateApiKeyResponses, UpdateApiKeyErrors, ThrowOnError>;
 }

package/dist/index.mjs

@@ -954,7 +954,7 @@ var ApiKeys = class {
 	/**
 	* Create an API key
 	*
-	* Creates a new API key for the authenticated user. - `project_id` is required: every key is scoped to exactly one project. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions, confined to the key's project.
+	* Creates a new API key for the authenticated user. - `project_id` is optional. When set, the key is scoped to that single project. When omitted or null, the key is **unscoped** and spans every project its owner can reach. - If `policy_ids` is provided, the key's effective permissions are the intersection of the user's policies and the key's policies. - Otherwise the key inherits the user's permissions (confined to the key's project when scoped).
 	*
 	*/
 	static createApiKey(options) {
@@ -992,7 +992,7 @@ var ApiKeys = class {
 	/**
 	* Update an API key
 	*
-	* Updates an API key's name, project scope, or policies. The project scope can be changed to another project but never cleared. Only the owner or an admin can update it.
+	* Updates an API key's name, project scope, or policies. The project scope can be changed to another project, set (scoping a previously unscoped key), or cleared with null (unscoping the key). Only the owner or an admin can update it.
 	*/
 	static updateApiKey(options) {
 		return (options.client ?? client).put({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/sdk",
-  "version": "0.15.6",
+  "version": "0.15.7",
   "description": "TypeScript SDK for the SOAT API",
   "type": "module",
   "main": "dist/index.mjs",