@soat/sdk 0.15.9 → 0.15.11

package/dist/index.mjs

@@ -871,7 +871,10 @@ var AiProviders = class {
 	/**
 	* Delete an AI provider
 	*
-	* Deletes an AI provider configuration
+	* Deletes an AI provider configuration.
+	*
+	* Live references — chats, agents, and discussions that use this provider — always block deletion with `409 AI_PROVIDER_HAS_DEPENDENTS`; `force` does not override them, so delete or repoint those resources first. Soft dependents — price overrides, usage/generation records, and discussion participants — also block with `409` unless `force=true`, which deletes the provider's price overrides and unlinks (nulls) its usage and participant history, preserving those rows. The `409` body's `error.meta` reports the counts, a sample of offending IDs, and a `forcible` flag that is `true` when a `force=true` retry would succeed.
+	*
 	*/
 	static deleteAiProvider(options) {
 		return (options.client ?? client).delete({
@@ -1957,6 +1960,101 @@ var Generations = class {
 		});
 	}
 };
+var Guardrails = class {
+	/**
+	* List guardrails
+	*
+	* Returns all guardrails in the project.
+	*/
+	static listGuardrails(options) {
+		return (options?.client ?? client).get({
+			url: "/api/v1/guardrails",
+			...options
+		});
+	}
+	/**
+	* Create a guardrail
+	*
+	* Creates a new guardrail in the project. The `document` is validated on write: `class` must be a literal (A/B/C/D) or a JSON Logic expression, and every variable it (and `guard`) reference must resolve to the `args.*` / `context.*` / `soat.*` namespaces — an out-of-catalog `soat.*` key is rejected with 400.
+	*
+	*/
+	static createGuardrail(options) {
+		return (options.client ?? client).post({
+			url: "/api/v1/guardrails",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Delete a guardrail
+	*
+	* Deletes a guardrail and its archived versions by ID.
+	*/
+	static deleteGuardrail(options) {
+		return (options.client ?? client).delete({
+			url: "/api/v1/guardrails/{guardrail_id}",
+			...options
+		});
+	}
+	/**
+	* Get a guardrail
+	*
+	* Returns a single guardrail by ID.
+	*/
+	static getGuardrail(options) {
+		return (options.client ?? client).get({
+			url: "/api/v1/guardrails/{guardrail_id}",
+			...options
+		});
+	}
+	/**
+	* Update a guardrail
+	*
+	* Updates an existing guardrail. A `document` write increments `version` and archives the prior document as a GuardrailVersion; metadata-only edits (name / description / context) leave the version untouched.
+	*
+	*/
+	static updateGuardrail(options) {
+		return (options.client ?? client).patch({
+			url: "/api/v1/guardrails/{guardrail_id}",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+	/**
+	* Fetch an archived guardrail version
+	*
+	* Returns the exact `document` that governed at a given version. Approval items, activity entries, and exceptions record the version that governed them, so the audit chain survives edits.
+	*
+	*/
+	static getGuardrailVersion(options) {
+		return (options.client ?? client).get({
+			url: "/api/v1/guardrails/{guardrail_id}/versions/{version}",
+			...options
+		});
+	}
+	/**
+	* Dry-run evaluate a guardrail
+	*
+	* Runs the full evaluation pipeline — the `class` expression, the guard, the context tool per `context_mode`, live `soat.*` resolution — against caller-supplied `args` and `guardrail_context`, and returns the exact `guardrail_evaluation` record a real call would produce. Nothing executes, no approval item is filed, and no activity entry is written. This is the adoption path: preview a document's decisions against production-shaped calls before attaching it — or before editing a widely-attached one. Pass an optional `tool_id` to resolve `soat.tool.*`.
+	*
+	*/
+	static evaluateGuardrail(options) {
+		return (options.client ?? client).post({
+			url: "/api/v1/guardrails/{guardrail_id}/evaluate",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
 var IngestionRules = class {
 	/**
 	* List ingestion rules
@@ -2446,9 +2544,9 @@ var Projects = class {
 		});
 	}
 	/**
-	* Rename a project
+	* Update a project
 	*
-	* Updates a project's name. Requires admin role.
+	* Updates a project's name and/or its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project). Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
 	*/
 	static updateProject(options) {
 		return (options.client ?? client).patch({
@@ -2762,7 +2860,7 @@ var Tasks = class {
 	/**
 	* Update a task
 	*
-	* Updates a task's payload, title, or assignee. `state` is never directly writable — move it with a transition. `payload` is shallow-merged over the existing payload (PATCH semantics): keys the request omits are preserved, so setting one field never discards values an on_enter automation wrote (e.g. `last_result`). The merged payload is validated against the workflow's `payload_schema`.
+	* Updates a task's payload, title, or assignee. `state` is never directly writable — move it with a transition; sending a `state` field is rejected as an unknown field (`VALIDATION_FAILED`). `payload` is shallow-merged over the existing payload (PATCH semantics): keys the request omits are preserved, so setting one field never discards values an on_enter automation wrote (e.g. `last_result`). The merged payload is validated against the workflow's `payload_schema`.
 	*/
 	static updateTask(options) {
 		return (options.client ?? client).patch({
@@ -2777,7 +2875,7 @@ var Tasks = class {
 	/**
 	* Transition a task
 	*
-	* Fires a named transition on a task. The transition must exist in the workflow and be valid from the task's current state; its guard must pass. This is the single path every state change routes through.
+	* Fires a named transition on a task. The transition must exist in the workflow and be valid from the task's current state; its guard must pass. This is the single path every state change routes through. A transition declaring `requires_approval` does not move the task — it parks a pending ApprovalItem and returns the task with `pending_transition` set; the move applies only when the approval is approved.
 	*/
 	static transitionTask(options) {
 		return (options.client ?? client).post({
@@ -3532,4 +3630,4 @@ var SoatClient = class {
 	}
 };
 //#endregion
-export { Actors, Agents, AiProviders, ApiKeys, Approvals, Chats, Conversations, Discussions, Documents, Embeddings, Files, Formations, Generations, IngestionRules, Knowledge, Memories, MemoryEntries, Orchestrations, Policies, Projects, Secrets, Sessions, SoatClient, Tasks, Tools, Traces, Triggers, Usage, Users, Webhooks, Workflows, createClient, createConfig };
+export { Actors, Agents, AiProviders, ApiKeys, Approvals, Chats, Conversations, Discussions, Documents, Embeddings, Files, Formations, Generations, Guardrails, IngestionRules, Knowledge, Memories, MemoryEntries, Orchestrations, Policies, Projects, Secrets, Sessions, SoatClient, Tasks, Tools, Traces, Triggers, Usage, Users, Webhooks, Workflows, createClient, createConfig };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/sdk",
-  "version": "0.15.9",
+  "version": "0.15.11",
   "description": "TypeScript SDK for the SOAT API",
   "type": "module",
   "main": "dist/index.mjs",