@soat/sdk 0.55.0 → 0.57.0

package/dist/index.cjs

@@ -3365,7 +3365,7 @@ var Projects = class {
 	/**
 	* Update a project
 	*
-	* Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
+	* Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its priced-model requirement (`require_priced_model`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
 	*/
 	static updateProject(options) {
 		return (options.client ?? client).patch({

package/dist/index.d.cts

@@ -482,7 +482,25 @@ type Agent = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
     /**
      * Public ID of the memory store the agent can write to during generation. When set, a write_memory tool is automatically available to the agent.
@@ -678,7 +696,25 @@ type CreateAgentRequest = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
     /**
      * Public ID of the memory store the agent can write to during generation. When set, a write_memory tool is automatically available to the agent.
@@ -768,7 +804,25 @@ type UpdateAgentRequest = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
     /**
      * Public ID of the memory store the agent can write to during generation. When set, a write_memory tool is automatically available to the agent.
@@ -859,7 +913,7 @@ type CreateAgentGenerationRequest = {
     [key: string]: unknown;
   } | null;
   /**
-   * Per-generation knowledge retrieval override. Array filters (memory_store_ids, document_ids, document_paths) are unioned with the agent's stored knowledge_config; `tags` pairs are merged with the override winning per key; scalar fields (min_score, limit) use the per-generation value when present.
+   * Per-generation knowledge retrieval override. Array filters (memory_store_ids, document_ids, document_paths) are unioned with the agent's stored knowledge_config; `tags` pairs are merged with the override winning per key; scalar fields (min_score, rrf_k, recency_half_life_days, limit) use the per-generation value when present.
    */
   knowledge_config?: {
     memory_store_ids?: Array<string>;
@@ -869,7 +923,25 @@ type CreateAgentGenerationRequest = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
   } | null;
 };
@@ -2407,9 +2479,17 @@ type AgentResourceProperties = {
      */
     tags?: TagBag;
     /**
-     * Minimum similarity score (0–1) for retrieved chunks
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked. Omitted, there is no floor.
      */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`; smaller weights the top of each ranking more heavily
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to memory results after fusion; `0` disables it
+     */
+    recency_half_life_days?: number;
     /**
      * Maximum number of chunks to inject
      */
@@ -2883,6 +2963,12 @@ type TriggerResourceProperties = {
   input?: {
     [key: string]: unknown;
   } | null;
+  /**
+   * Caller context every firing forwards to the run it starts, so an agent whose tools authorize through `{{context:<key>}}` can be scheduled. Write-only. A value may be a `{{secret:...}}` reference, which is what a template should carry — the credential stays in the secret store and only its name is checked in
+   */
+  tool_context?: {
+    [key: string]: string;
+  } | null;
   /**
    * 5-field cron expression (UTC). Required when type is schedule
    */
@@ -4705,14 +4791,15 @@ type OrchestrationNode = {
     [key: string]: unknown;
   };
   /**
-   * Maps state write paths to values. Each key is a `state.<path>` destination (the `state.` prefix is optional); each value is JSON Logic (https://jsonlogic.com) evaluated against `{ "output": <node artifact>, "state": <run state> }` — e.g. `{ "summary": {"var": "output.content"} }` writes the artifact's `content` field to `state.summary`. The same evaluator as input_mapping/transform/condition; only the context differs.
+   * Maps state write paths to values. Each key is a `state.<path>` destination (the `state.` prefix is optional); each value is JSON Logic (https://jsonlogic.com) evaluated against `{ "output": <node artifact>, "state": <run state> }` — e.g. `{ "summary": {"var": "output.content"} }` writes the artifact's `content` field to `state.summary`. The same evaluator as input_mapping/transform/condition; only the context differs. An `agent` node's artifact always carries both `content` (the text response) and `object` (the parsed value when a schema applied, `null` otherwise), so `output.content` reads the same whether or not the node declares an `output_schema`.
    *
    */
   state_mapping?: {
     [key: string]: unknown;
   };
   /**
-   * For agent nodes — JSON Schema for structured output parsing.
+   * For agent nodes — JSON Schema the model's answer is parsed into, reaching the artifact as `object`. Declaring it here is only needed for an agent that carries no `output_schema` of its own: the agent's schema already produces the artifact's `object` wherever that agent generates.
+   *
    */
   output_schema?: {
     [key: string]: unknown;
@@ -5000,12 +5087,6 @@ type OrchestrationRun = {
   input?: {
     [key: string]: unknown;
   } | null;
-  /**
-   * The `tool_context` supplied at run creation, forwarded as `X-Soat-Context-<key>` headers on every tool call the run's agent nodes make. Null when the run was started without one.
-   */
-  tool_context?: {
-    [key: string]: string;
-  } | null;
   /**
    * The caller-owned key/value metadata supplied at run creation, returned verbatim. Null when the run was started without any. The server writes nothing here and no key is reserved; the bag is never merged into `state`, so nothing in it reaches the graph.
    */
@@ -5081,6 +5162,11 @@ type NodeExecution = {
    *
    */
   attempt: number;
+  /**
+   * How many times this attempt was dispatched, including the first. A worker that stops mid-node leaves its task to be redelivered, and the redelivery re-runs the node under this same record — so a count above 1 is work the run issued, and was billed for, more than once.
+   *
+   */
+  dispatches: number;
   /**
    * Node execution status. `running` marks an execution record whose node is still in flight. Open set — new statuses may be added in minor releases; clients must tolerate unknown values.
    */
@@ -5175,7 +5261,7 @@ type StartOrchestrationRunRequest = {
   /**
    * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
    *
-   * The bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.
+   * The bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. It is **write-only**: a run is a record every principal who may read runs can read, and a credential in it is not theirs to see, so it is never returned on one. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.
    *
    * The reserved identity keys (`session_id`, `actor_id`, `actor_external_id`) are stripped at generation time — a caller cannot address them from here.
    */
@@ -5271,6 +5357,10 @@ type ProjectRecord = {
    * Whether `GET` requests naming this project are recorded in the audit log. `false` by default — v1 audits mutations only.
    */
   audit_reads_enabled?: boolean;
+  /**
+   * Whether a generation whose model carries no price row is refused with `409 MODEL_NOT_PRICED`. `false` by default, where an unpriced model runs and meters at `cost_usd: null`.
+   */
+  require_priced_model?: boolean;
   /**
    * What a conversation that names no `retrieval` of its own does. `none` by default.
    */
@@ -6289,6 +6379,17 @@ type CreateTriggerRequest = {
   input?: {
     [key: string]: unknown;
   };
+  /**
+   * Caller context every firing forwards to the run it starts, so an agent whose tools authorize through `{{context:<key>}}` can be put on a schedule — a firing has no request to carry one. Each key is forwarded as one `X-Soat-Context-<key>` header.
+   *
+   * **Write-only.** It is accepted here and never returned on a read, so the record cannot be used to recover a value.
+   *
+   * A value may be a `{{secret:...}}` reference, which keeps the credential in the [secret](/docs/modules/secrets) store and leaves only its name on the trigger; it is resolved at fire time, so rotating the secret changes the next firing without touching the trigger. A reference naming a secret that does not exist in this project is refused here rather than at fire time.
+   *
+   */
+  tool_context?: {
+    [key: string]: string;
+  };
   /**
    * 5-field cron expression (UTC). Required when type is schedule
    */
@@ -6309,6 +6410,13 @@ type UpdateTriggerRequest = {
   input?: {
     [key: string]: unknown;
   } | null;
+  /**
+   * Replaces the stored bag; `null` clears it. Write-only and resolved at fire time — see `CreateTriggerRequest.tool_context`.
+   *
+   */
+  tool_context?: {
+    [key: string]: string;
+  } | null;
   cron?: string | null;
   event_pattern?: string | null;
   active?: boolean;
@@ -6321,6 +6429,15 @@ type FireTriggerRequest = {
   input?: {
     [key: string]: unknown;
   };
+  /**
+   * Fire-time caller context, shallow-merged per key over the trigger's stored `tool_context`. A manual fire has a caller, so this is the one path that can supply a value without storing it.
+   *
+   * Forwarded exactly as written: a `{{secret:...}}` reference is resolved only in the trigger's stored bag, never in one supplied here.
+   *
+   */
+  tool_context?: {
+    [key: string]: string;
+  };
 };
 type TriggerSecretResponse = {
   secret?: string;
@@ -15459,6 +15576,10 @@ type UpdateProjectData = {
      * Opt the project into read auditing. When true, `GET` requests that name this project are recorded in the audit log alongside mutations. Defaults to `false`.
      */
     audit_reads_enabled?: boolean;
+    /**
+     * Refuse a generation whose model carries no price row for every billable token component, with `409 MODEL_NOT_PRICED`. Defaults to `false`, where an unpriced model runs and meters at `cost_usd: null`. The check runs before the provider is called, so a refused turn spends nothing, and covers every target of a model route the turn may fail over to.
+     */
+    require_priced_model?: boolean;
     /**
      * What a conversation that names no `retrieval` of its own does. `none` by default: a turn is embedded because someone asked for the conversation to be retrievable, never merely because it was said. Turns are stored and chunked on both settings.
      */
@@ -20170,7 +20291,7 @@ export declare class Projects {
   /**
    * Update a project
    *
-   * Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
+   * Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its priced-model requirement (`require_priced_model`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
    */
   static updateProject<ThrowOnError extends boolean = false>(options: Options<UpdateProjectData, ThrowOnError>): RequestResult<UpdateProjectResponses, UpdateProjectErrors, ThrowOnError>;
   /**

package/dist/index.d.mts

@@ -482,7 +482,25 @@ type Agent = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
     /**
      * Public ID of the memory store the agent can write to during generation. When set, a write_memory tool is automatically available to the agent.
@@ -678,7 +696,25 @@ type CreateAgentRequest = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
     /**
      * Public ID of the memory store the agent can write to during generation. When set, a write_memory tool is automatically available to the agent.
@@ -768,7 +804,25 @@ type UpdateAgentRequest = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
     /**
      * Public ID of the memory store the agent can write to during generation. When set, a write_memory tool is automatically available to the agent.
@@ -859,7 +913,7 @@ type CreateAgentGenerationRequest = {
     [key: string]: unknown;
   } | null;
   /**
-   * Per-generation knowledge retrieval override. Array filters (memory_store_ids, document_ids, document_paths) are unioned with the agent's stored knowledge_config; `tags` pairs are merged with the override winning per key; scalar fields (min_score, limit) use the per-generation value when present.
+   * Per-generation knowledge retrieval override. Array filters (memory_store_ids, document_ids, document_paths) are unioned with the agent's stored knowledge_config; `tags` pairs are merged with the override winning per key; scalar fields (min_score, rrf_k, recency_half_life_days, limit) use the per-generation value when present.
    */
   knowledge_config?: {
     memory_store_ids?: Array<string>;
@@ -869,7 +923,25 @@ type CreateAgentGenerationRequest = {
      * Key-value pairs a result's own `tags` must all contain (exact match). Scopes documents and memories alike.
      */
     tags?: TagBag;
+    /**
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked, the floor the search endpoint spells `min_similarity`. No default: omitted means no floor at all, and every one of the `limit` nearest chunks is injected however weak it is.
+     *
+     */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`, the same knob knowledge search takes. Smaller weights the top of each ranking more heavily. Omitted, the deployment's `KNOWLEDGE_RRF_K` applies.
+     *
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to **memory** results after fusion, the same knob knowledge search takes. `0` disables it. Omitted, the deployment's `KNOWLEDGE_RECENCY_HALF_LIFE_DAYS` applies.
+     *
+     */
+    recency_half_life_days?: number;
+    /**
+     * Maximum number of results to inject. Omitted, 10 are injected.
+     *
+     */
     limit?: number;
   } | null;
 };
@@ -2407,9 +2479,17 @@ type AgentResourceProperties = {
      */
     tags?: TagBag;
     /**
-     * Minimum similarity score (0–1) for retrieved chunks
+     * Minimum raw cosine similarity (0–1) a vector candidate must reach to be ranked. Omitted, there is no floor.
      */
     min_score?: number;
+    /**
+     * The `k` in the fusion term `1 / (k + rank)`; smaller weights the top of each ranking more heavily
+     */
+    rrf_k?: number;
+    /**
+     * Half-life in days of the decay applied to memory results after fusion; `0` disables it
+     */
+    recency_half_life_days?: number;
     /**
      * Maximum number of chunks to inject
      */
@@ -2883,6 +2963,12 @@ type TriggerResourceProperties = {
   input?: {
     [key: string]: unknown;
   } | null;
+  /**
+   * Caller context every firing forwards to the run it starts, so an agent whose tools authorize through `{{context:<key>}}` can be scheduled. Write-only. A value may be a `{{secret:...}}` reference, which is what a template should carry — the credential stays in the secret store and only its name is checked in
+   */
+  tool_context?: {
+    [key: string]: string;
+  } | null;
   /**
    * 5-field cron expression (UTC). Required when type is schedule
    */
@@ -4705,14 +4791,15 @@ type OrchestrationNode = {
     [key: string]: unknown;
   };
   /**
-   * Maps state write paths to values. Each key is a `state.<path>` destination (the `state.` prefix is optional); each value is JSON Logic (https://jsonlogic.com) evaluated against `{ "output": <node artifact>, "state": <run state> }` — e.g. `{ "summary": {"var": "output.content"} }` writes the artifact's `content` field to `state.summary`. The same evaluator as input_mapping/transform/condition; only the context differs.
+   * Maps state write paths to values. Each key is a `state.<path>` destination (the `state.` prefix is optional); each value is JSON Logic (https://jsonlogic.com) evaluated against `{ "output": <node artifact>, "state": <run state> }` — e.g. `{ "summary": {"var": "output.content"} }` writes the artifact's `content` field to `state.summary`. The same evaluator as input_mapping/transform/condition; only the context differs. An `agent` node's artifact always carries both `content` (the text response) and `object` (the parsed value when a schema applied, `null` otherwise), so `output.content` reads the same whether or not the node declares an `output_schema`.
    *
    */
   state_mapping?: {
     [key: string]: unknown;
   };
   /**
-   * For agent nodes — JSON Schema for structured output parsing.
+   * For agent nodes — JSON Schema the model's answer is parsed into, reaching the artifact as `object`. Declaring it here is only needed for an agent that carries no `output_schema` of its own: the agent's schema already produces the artifact's `object` wherever that agent generates.
+   *
    */
   output_schema?: {
     [key: string]: unknown;
@@ -5000,12 +5087,6 @@ type OrchestrationRun = {
   input?: {
     [key: string]: unknown;
   } | null;
-  /**
-   * The `tool_context` supplied at run creation, forwarded as `X-Soat-Context-<key>` headers on every tool call the run's agent nodes make. Null when the run was started without one.
-   */
-  tool_context?: {
-    [key: string]: string;
-  } | null;
   /**
    * The caller-owned key/value metadata supplied at run creation, returned verbatim. Null when the run was started without any. The server writes nothing here and no key is reserved; the bag is never merged into `state`, so nothing in it reaches the graph.
    */
@@ -5081,6 +5162,11 @@ type NodeExecution = {
    *
    */
   attempt: number;
+  /**
+   * How many times this attempt was dispatched, including the first. A worker that stops mid-node leaves its task to be redelivered, and the redelivery re-runs the node under this same record — so a count above 1 is work the run issued, and was billed for, more than once.
+   *
+   */
+  dispatches: number;
   /**
    * Node execution status. `running` marks an execution record whose node is still in flight. Open set — new statuses may be added in minor releases; clients must tolerate unknown values.
    */
@@ -5175,7 +5261,7 @@ type StartOrchestrationRunRequest = {
   /**
    * Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.
    *
-   * The bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.
+   * The bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. It is **write-only**: a run is a record every principal who may read runs can read, and a credential in it is not theirs to see, so it is never returned on one. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.
    *
    * The reserved identity keys (`session_id`, `actor_id`, `actor_external_id`) are stripped at generation time — a caller cannot address them from here.
    */
@@ -5271,6 +5357,10 @@ type ProjectRecord = {
    * Whether `GET` requests naming this project are recorded in the audit log. `false` by default — v1 audits mutations only.
    */
   audit_reads_enabled?: boolean;
+  /**
+   * Whether a generation whose model carries no price row is refused with `409 MODEL_NOT_PRICED`. `false` by default, where an unpriced model runs and meters at `cost_usd: null`.
+   */
+  require_priced_model?: boolean;
   /**
    * What a conversation that names no `retrieval` of its own does. `none` by default.
    */
@@ -6289,6 +6379,17 @@ type CreateTriggerRequest = {
   input?: {
     [key: string]: unknown;
   };
+  /**
+   * Caller context every firing forwards to the run it starts, so an agent whose tools authorize through `{{context:<key>}}` can be put on a schedule — a firing has no request to carry one. Each key is forwarded as one `X-Soat-Context-<key>` header.
+   *
+   * **Write-only.** It is accepted here and never returned on a read, so the record cannot be used to recover a value.
+   *
+   * A value may be a `{{secret:...}}` reference, which keeps the credential in the [secret](/docs/modules/secrets) store and leaves only its name on the trigger; it is resolved at fire time, so rotating the secret changes the next firing without touching the trigger. A reference naming a secret that does not exist in this project is refused here rather than at fire time.
+   *
+   */
+  tool_context?: {
+    [key: string]: string;
+  };
   /**
    * 5-field cron expression (UTC). Required when type is schedule
    */
@@ -6309,6 +6410,13 @@ type UpdateTriggerRequest = {
   input?: {
     [key: string]: unknown;
   } | null;
+  /**
+   * Replaces the stored bag; `null` clears it. Write-only and resolved at fire time — see `CreateTriggerRequest.tool_context`.
+   *
+   */
+  tool_context?: {
+    [key: string]: string;
+  } | null;
   cron?: string | null;
   event_pattern?: string | null;
   active?: boolean;
@@ -6321,6 +6429,15 @@ type FireTriggerRequest = {
   input?: {
     [key: string]: unknown;
   };
+  /**
+   * Fire-time caller context, shallow-merged per key over the trigger's stored `tool_context`. A manual fire has a caller, so this is the one path that can supply a value without storing it.
+   *
+   * Forwarded exactly as written: a `{{secret:...}}` reference is resolved only in the trigger's stored bag, never in one supplied here.
+   *
+   */
+  tool_context?: {
+    [key: string]: string;
+  };
 };
 type TriggerSecretResponse = {
   secret?: string;
@@ -15459,6 +15576,10 @@ type UpdateProjectData = {
      * Opt the project into read auditing. When true, `GET` requests that name this project are recorded in the audit log alongside mutations. Defaults to `false`.
      */
     audit_reads_enabled?: boolean;
+    /**
+     * Refuse a generation whose model carries no price row for every billable token component, with `409 MODEL_NOT_PRICED`. Defaults to `false`, where an unpriced model runs and meters at `cost_usd: null`. The check runs before the provider is called, so a refused turn spends nothing, and covers every target of a model route the turn may fail over to.
+     */
+    require_priced_model?: boolean;
     /**
      * What a conversation that names no `retrieval` of its own does. `none` by default: a turn is embedded because someone asked for the conversation to be retrievable, never merely because it was said. Turns are stored and chunked on both settings.
      */
@@ -20170,7 +20291,7 @@ export declare class Projects {
   /**
    * Update a project
    *
-   * Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
+   * Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its priced-model requirement (`require_priced_model`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
    */
   static updateProject<ThrowOnError extends boolean = false>(options: Options<UpdateProjectData, ThrowOnError>): RequestResult<UpdateProjectResponses, UpdateProjectErrors, ThrowOnError>;
   /**

package/dist/index.mjs

@@ -3364,7 +3364,7 @@ var Projects = class {
 	/**
 	* Update a project
 	*
-	* Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
+	* Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its priced-model requirement (`require_priced_model`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.
 	*/
 	static updateProject(options) {
 		return (options.client ?? client).patch({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/sdk",
-  "version": "0.55.0",
+  "version": "0.57.0",
   "description": "TypeScript SDK for SOAT — open-source infrastructure for production-ready AI agents.",
   "keywords": [
     "ai-agents",