@squidcloud/client 1.0.487 → 1.0.489

package/dist/internal-common/src/public-types/ai-agent-integrations.public-types.d.ts

@@ -48,6 +48,14 @@ export interface AiApiOptions {
      * Defaults to no memory.
      */
     memoryOptions?: AiAgentMemoryOptions;
+    /**
+     * How long, in milliseconds, a single AI call of the loop may wait for the provider — endpoint
+     * selection, request-body creation and response analysis each get this budget on their own, so
+     * the whole call may run for a multiple of it. Values below the chat minimum of 20 000 ms are
+     * raised to it. Defaults to the standard chat timeout, or to the timeout of the chat this call
+     * runs inside when the caller is a nested one.
+     */
+    stageTimeoutMs?: number;
 }
 /**
  * Configuration options for AI agent MCP integration.

package/dist/internal-common/src/public-types/ai-agent.public-types.d.ts

@@ -420,6 +420,26 @@ export interface IntegrationModelSpec {
  * @category AI
  */
 export type AiChatModelSelection = AiChatModelName | IntegrationModelSpec;
+/**
+ * A backup model together with the sampling settings to run it with. Use this form instead of a
+ * bare {@link AiChatModelSelection} when the backup needs settings of its own; anything left unset
+ * takes the backup model's own default rather than the primary model's value.
+ * @category AI
+ */
+export interface BackupModelOptions {
+    /** The model to fall back to. */
+    model: AiChatModelSelection;
+    /** The temperature to use when sampling from the backup model. */
+    temperature?: number;
+    /** The level of reasoning effort to apply; effective only for models with reasoning. */
+    reasoningEffort?: AiReasoningEffort;
+    /** The maximum number of input tokens Squid may send to the backup model. */
+    maxTokens?: number;
+    /** The maximum number of tokens the backup model should output. */
+    maxOutputTokens?: number;
+    /** Response length and detail level; supported by OpenAI models only. */
+    verbosity?: AiVerbosityLevel;
+}
 /**
  * The base AI agent chat options, should not be used directly.
  * @category AI
@@ -505,8 +525,59 @@ export interface BaseAiChatOptions {
     temperature?: number;
     /** Preset instruction options that can be toggled on */
     guardrails?: GuardrailsOptions;
+    /**
+     * Refuses prompts that carry PII before they reach the model. Read from the stored agent only —
+     * a value passed with a chat request is ignored, so a caller cannot switch off its own screening.
+     */
+    pii?: AiPiiOptions;
     /** The LLM model to use. Can be a vendor model name (string) or an integration-based model (object). */
     model?: AiChatModelSelection;
+    /**
+     * The model to use when `model` cannot serve the conversation's very first request because its
+     * provider is unavailable — a rate limit, a capacity outage, or any other failure on the
+     * provider's side. A request that fails for its own reasons (an invalid prompt, a rejected
+     * schema, an exhausted Squid quota) is never retried on the backup, nor is any request after the
+     * first one, nor one that already produced output or ran a tool.
+     *
+     * A conversation that fell back then STAYS on that backup for the rest of its life, so an outage
+     * costs the primary's retry budget once rather than once per turn, and the model does not change
+     * mid-dialogue. The pin outlives the option that created it: changing or removing `backupModel`,
+     * changing the agent's own `model`, and the primary recovering all leave a pinned conversation
+     * where it is, and a pinned model that no longer resolves fails the request rather than moving the
+     * conversation. This is deliberate — a conversation accumulates provider-native file ids and a
+     * transcript in that provider's dialect, none of which survive a move. Pinning needs Squid-managed
+     * memory to have somewhere to record it; without memory every request is a first request anyway.
+     *
+     * A request carrying `fileIds` follows from the same reasoning, and the two cases differ. A first
+     * request does not fall back where that would cost it the attachments — to a model that cannot read
+     * ids the primary could, or that reads them without owning them — since answering from a model that
+     * never saw them is worse than reporting the outage. Where neither model reads file ids they are
+     * inert either way and the fallback proceeds. A
+     * conversation already pinned is held to less: it keeps running on its model, and if that model
+     * reads no file ids the ids are ignored there as they are anywhere else, because the alternative is
+     * a conversation that can never run again.
+     *
+     * Pass a model name for the model's own defaults, or a {@link BackupModelOptions} object to give
+     * the backup its own sampling settings. Everything else — instructions, functions, knowledge
+     * bases, connected agents, response format, memory — always comes from the primary configuration.
+     *
+     * On a turn the backup serves, the sampling settings are ITS settings alone: `temperature`,
+     * `reasoningEffort`, `maxTokens`, `maxOutputTokens` and `verbosity` are read from `backupModel`
+     * and nowhere else, so a value left unset there takes the backup model's own default even when
+     * the agent's profile or the request itself carries one. This holds for every turn of a pinned
+     * conversation, not only the one that fell back — tuning meant for one model is not evidence of
+     * what another should use.
+     *
+     * Applies to models served through Squid's own provider SDKs — the vendor models and
+     * `openai_compatible`, Bedrock and Vertex integrations. A model you serve yourself from backend
+     * code reports its failures as plain errors that carry no provider status, so a turn on one is
+     * never diagnosed as a provider outage and never falls back.
+     *
+     * The backup resolves its API key exactly as it would as the primary model, and is skipped
+     * silently when it cannot be resolved, when it reaches the same model as the primary, or when
+     * either model is a CLI-backed agent. Leave unset to keep a provider outage surfacing as an error.
+     */
+    backupModel?: AiChatModelSelection | BackupModelOptions;
     /** Which provider's reranker to use for reranking the context. Defaults to 'cohere'. */
     rerankProvider?: AiRerankProvider;
     /**
@@ -932,9 +1003,13 @@ export interface UpsertContextStatusSuccess extends BaseUpsertContextStatus {
  *
  * `DUPLICATE_CONTENT` means the request omitted a contextId and its content is
  * byte-identical to an existing context in the same knowledge base.
+ *
+ * `EMBEDDING_FAILED` means extraction succeeded but embedding the context's chunks did not; the
+ * content was not written (an overwrite target keeps its previous content) and the request can be
+ * safely retried as-is.
  * @category AI
  */
-export type UpsertContextErrorCode = 'DUPLICATE_CONTENT';
+export type UpsertContextErrorCode = 'DUPLICATE_CONTENT' | 'EMBEDDING_FAILED';
 /**
  * The existing context a `DUPLICATE_CONTENT` rejection points at — where the byte-identical original
  * already lives.
@@ -1077,6 +1152,56 @@ export type GuardrailsOptions = {
     /** A custom guardrail instruction, if specified. */
     custom?: string;
 };
+/**
+ * PII kinds a prompt can be screened for. Each one is judged in context by the screening model, so
+ * a value is classified by what the prompt says it is rather than by which format it happens to fit.
+ * @category AI
+ */
+export type AiPiiEntityType = 'email' | 'phoneNumber' | 'creditCard' | 'ssn' | 'iban' | 'passport';
+/** Entity kinds screened when {@link AiPiiOptions.entities} is omitted. */
+export declare const DEFAULT_PII_ENTITY_TYPES: ReadonlyArray<AiPiiEntityType>;
+/** Model that screens prompts unless overridden. Small and fast: it runs on every prompt. */
+export declare const DEFAULT_PII_CLASSIFIER_MODEL = "gpt-5.6-luna";
+/**
+ * Rejects a prompt before it reaches the agent's model when it carries PII, so the prompt is never
+ * sent to the model provider, never answered, and never written to chat memory.
+ *
+ * Screening is one {@link classifierModel} call per prompt, covering {@link entities} and
+ * {@link customRules} together. Because a model does the reading rather than a pattern, a value is
+ * judged by what the prompt says it is, and app-specific identifiers can be described in plain
+ * language instead of expressed as a format.
+ *
+ * This is the inverse of {@link GuardrailsOptions.disablePii}, which asks the agent's own model not
+ * to *emit* PII in its answer.
+ * @category AI
+ */
+export type AiPiiOptions = {
+    /** `reject` refuses a prompt carrying PII; `off` (default) disables screening entirely. */
+    onDetect: 'off' | 'reject';
+    /** Entity kinds to screen for. Defaults to {@link DEFAULT_PII_ENTITY_TYPES}. */
+    entities?: Array<AiPiiEntityType>;
+    /** App-specific PII in plain language, e.g. `'internal case numbers like CASE-12345'`. */
+    customRules?: Array<string>;
+    /** Model performing the screening. Defaults to {@link DEFAULT_PII_CLASSIFIER_MODEL}. */
+    classifierModel?: AiChatModelSelection;
+    /** Literal values that never count as PII, e.g. a shared support address. */
+    allowList?: Array<string>;
+};
+/**
+ * Outcome of screening one prompt. On a detection the prompt is replaced by {@link redactedPrompt}
+ * everywhere it would otherwise be stored, so the audit trail records that a request was refused
+ * and why without restating the values that caused it.
+ * @category AI
+ */
+export type AiPiiScanResult = {
+    detected: false;
+} | {
+    detected: true;
+    /** Entity kinds and custom-rule names that matched. Never the matched values. */
+    matchedTypes: Array<string>;
+    /** The prompt with every match replaced by a `[REDACTED:<type>]` placeholder. */
+    redactedPrompt: string;
+};
 /**
  * Response structure for transcribing audio and asking an AI agent a question.
  * @category AI
@@ -1146,8 +1271,8 @@ export type AiSessionContext = {
     /** The ID of the job associated with the session. */
     jobId: JobId;
     /**
-     * The conversation this call belongs to, as the caller named it (`memoryOptions.memoryId`, or the
-     * deprecated `chatId`). Stable across the turns of one chat and different for two chats, including
+     * The conversation this call belongs to, as the caller named it (`memoryOptions.memoryId`).
+     * Stable across the turns of one chat and different for two chats, including
      * two chats of the same client, which `clientId` is not: a client id belongs to a connection, and
      * one connection can carry several conversations. Not the id chat history is keyed by — that one
      * falls back to `clientId` — so do not read it as one. Absent for callers that named no conversation

package/dist/internal-common/src/public-types/ai-common.public-types.d.ts

@@ -20,26 +20,38 @@ export type AiProviderType = (typeof AI_PROVIDER_TYPES)[number];
  * @category AI
  */
 export type CanonicalReasoningEffort = 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max' | 'ultra';
+/**
+ * The AI providers that support file upload operations, and so are the only ones that resolve a
+ * pre-uploaded file id. Declared as the list, with the type derived from it, so the two cannot drift:
+ * a provider added to one is added to both.
+ */
+export declare const AI_FILE_PROVIDER_TYPES: readonly ["openai", "gemini", "anthropic", "grok"];
 /**
  * Type of AI provider that supports file upload operations.
  * Only a subset of AI providers support file management features.
  */
-export type AiFileProviderType = Extract<AiProviderType, 'openai' | 'gemini' | 'anthropic' | 'grok'>;
+export type AiFileProviderType = (typeof AI_FILE_PROVIDER_TYPES)[number];
+/**
+ * True when the provider resolves pre-uploaded file ids. Every other provider — the integration-backed
+ * and user-defined ones, which report no vendor identity of their own — ignores `fileIds` outright, so
+ * for them the ids are inert rather than wrong.
+ */
+export declare function isFileCapableProviderType(type: AiProviderType): type is AiFileProviderType;
 /**
  * Public OpenAI chat model names (active models only).
  * @category AI
  */
-export declare const OPENAI_CHAT_MODEL_NAMES: readonly ["gpt-5.4-mini", "gpt-5.4-nano", "gpt-5.5", "gpt-5.5-pro", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"];
+export declare const OPENAI_CHAT_MODEL_NAMES: readonly ["gpt-5.5-pro", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"];
 /**
  * Public Gemini chat model names (active models only).
  * @category AI
  */
-export declare const GEMINI_CHAT_MODEL_NAMES: readonly ["gemini-3.1-pro", "gemini-3.6-flash", "gemini-3.5-flash-lite"];
+export declare const GEMINI_CHAT_MODEL_NAMES: readonly ["gemini-3.1-pro", "gemini-3.7-flash", "gemini-3.5-flash-lite"];
 /**
  * Public Grok chat model names (active models only).
  * @category AI
  */
-export declare const GROK_CHAT_MODEL_NAMES: readonly ["grok-4.5", "grok-4-1-fast-reasoning", "grok-4-1-fast-non-reasoning"];
+export declare const GROK_CHAT_MODEL_NAMES: readonly ["grok-4.6", "grok-4-1-fast-reasoning", "grok-4-1-fast-non-reasoning"];
 /**
  * Public Anthropic chat model names (active models only).
  * @category AI
@@ -49,7 +61,7 @@ export declare const ANTHROPIC_CHAT_MODEL_NAMES: readonly ["claude-fable-5", "cl
  * The supported AI model names.
  * @category AI
  */
-export declare const VENDOR_AI_CHAT_MODEL_NAMES: readonly ["gpt-5.4-mini", "gpt-5.4-nano", "gpt-5.5", "gpt-5.5-pro", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "claude-fable-5", "claude-haiku-4-5-20251001", "claude-opus-5", "claude-sonnet-5", "gemini-3.1-pro", "gemini-3.6-flash", "gemini-3.5-flash-lite", "grok-4.5", "grok-4-1-fast-reasoning", "grok-4-1-fast-non-reasoning"];
+export declare const VENDOR_AI_CHAT_MODEL_NAMES: readonly ["gpt-5.5-pro", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "claude-fable-5", "claude-haiku-4-5-20251001", "claude-opus-5", "claude-sonnet-5", "gemini-3.1-pro", "gemini-3.7-flash", "gemini-3.5-flash-lite", "grok-4.6", "grok-4-1-fast-reasoning", "grok-4-1-fast-non-reasoning"];
 /** Checks if the given model name is a global AI chat model name.  */
 export declare function isVendorAiChatModelName(modelName: unknown): modelName is VendorAiChatModelName;
 /**

package/dist/internal-common/src/public-types/ai-knowledge-base.public-types.d.ts

@@ -161,8 +161,9 @@ export interface AiKnowledgeBaseGraphSearchOptions {
 }
 /**
  * Per-knowledge-base GraphRAG configuration. Opt-in and mutable (unlike `embeddingModel`/`vectorDbType`);
- * only honored for `vectorDbType:'mongoAtlas'` KBs. Enabling it on a KB that already has content requires a
- * graph backfill (the `rebuildGraph` endpoint).
+ * only honored for `vectorDbType:'mongoAtlas'` KBs. Enabling it on a KB that already has content backfills
+ * the graph automatically (a debounced structural build runs once the KB goes quiet); the `rebuildGraph`
+ * endpoint remains available for an immediate or full rebuild.
  * @category AI
  */
 export interface AiKnowledgeBaseGraphConfig {
@@ -172,6 +173,12 @@ export interface AiKnowledgeBaseGraphConfig {
     extractionModel?: AiChatModelSelection;
     /** Optional domain taxonomy hint (entity types) injected into the extraction prompt. */
     entityTypes?: string[];
+    /**
+     * Quiet window (milliseconds) after the last graph activity before the sweep auto-builds the
+     * structure. Must be a positive integer. Defaults to the server's window (5 minutes); the sweep
+     * cadence (1 minute) bounds how promptly an elapsed window is picked up.
+     */
+    autoBuildDebounceMs?: number;
     /** Concept-layer (facet taxonomy) configuration. Omitted ⇒ `facets: 'auto'`. */
     concepts?: AiKnowledgeBaseGraphConceptsConfig;
 }
@@ -1085,6 +1092,13 @@ export interface GetKnowledgeBaseGraphStatusResponse {
      * {@link ingestUsage}.
      */
     combinedIngestUsage?: KnowledgeBaseGraphUsage;
+    /** When a structural/full rebuild last completed successfully (epoch millis), when one ever has. */
+    lastStructureBuildAt?: number;
+    /**
+     * When the debounced auto-build sweep will pick the KB up (epoch millis), present while an auto-build
+     * is pending. Recomputed per poll — it moves forward while ingest activity continues.
+     */
+    nextAutoBuildAt?: number;
 }
 /** The most recent graph backfill/rebuild job of a knowledge base. @category AI */
 export interface KnowledgeBaseGraphBuildJob {
@@ -1092,6 +1106,8 @@ export interface KnowledgeBaseGraphBuildJob {
     status: 'in_progress' | 'completed' | 'failed';
     /** Failure message, present when `status` is `'failed'`. */
     error?: string;
+    /** When the job was enqueued (epoch millis). */
+    startedAt?: number;
 }
 /**
  * Aggregated LLM token usage (and best-effort cost) of graph work on a KB. Token counts are the
@@ -1172,13 +1188,15 @@ export interface KnowledgeBaseGraphFacetValueStatus {
 /**
  * How much of the knowledge base's graph a rebuild recomputes.
  *
+ * - `'structural'` (default) — keeps the already-extracted entity graph (LLM extraction runs only for
+ *   contexts that were never graph-indexed, e.g. after an interrupted ingest) and recomputes the
+ *   derived structure on top of it: entity resolution, lexical mentions, topics and facets. Typically
+ *   a small fraction of a full rebuild's cost — the right choice for folding freshly ingested
+ *   documents into topics/facets.
  * - `'full'` — wipes the graph and re-extracts entities/relationships from every chunk with an LLM,
  *   then rebuilds the concept layer. The expensive deep-clean: re-extraction dominates its cost.
- * - `'structural'` — keeps the already-extracted entity graph (LLM extraction runs only for contexts
- *   that were never graph-indexed, e.g. after an interrupted ingest) and recomputes the derived
- *   structure on top of it: entity resolution, lexical mentions, topics and facets. Typically a small
- *   fraction of a full rebuild's cost — the right choice for folding freshly ingested documents into
- *   topics/facets.
+ *   Only needed when the extraction itself must be redone, e.g. after changing `entityTypes` or
+ *   `extractionModel`.
  * @category AI
  */
 export type KnowledgeBaseGraphRebuildMode = 'full' | 'structural';
@@ -1189,7 +1207,7 @@ export type KnowledgeBaseGraphRebuildMode = 'full' | 'structural';
 export interface RebuildKnowledgeBaseGraphRequest {
     /** The id of the AiKnowledgeBase. */
     knowledgeBaseId: AiKnowledgeBaseId;
-    /** What to recompute (see {@link KnowledgeBaseGraphRebuildMode}). Default `'full'`. */
+    /** What to recompute (see {@link KnowledgeBaseGraphRebuildMode}). Default `'structural'`. */
     mode?: KnowledgeBaseGraphRebuildMode;
 }
 /**
@@ -1498,12 +1516,17 @@ export interface BulkIngestionUpsertContextsResponse {
      */
     contextIds: Array<string>;
     /**
-     * Contexts rejected because the knowledge base already holds identical content — either stored under an
-     * existing context or accepted earlier in this same call. Absent when nothing was rejected.
+     * Contexts rejected because the knowledge base already holds identical content — either stored under
+     * an existing context or accepted earlier in this same call. Absent when nothing was rejected.
      *
      * Same shape and `errorCode: 'DUPLICATE_CONTENT'` the synchronous `upsertContexts` returns, so a caller
      * handles a duplicate identically on both lanes. These contexts are NOT part of the job: they are not
      * extracted, not staged, and never appear in its per-file statuses.
+     *
+     * Covers TEXT contexts and MULTIPART file contexts (their bytes are in hand at staging). A file staged
+     * by `stagedObjectKey` is the one exception: its bytes are first read by the deferred extraction pass,
+     * so its duplicate surfaces asynchronously as a failed file with `errorCode: 'DUPLICATE_CONTENT'` in
+     * the job's per-file statuses instead.
      */
     duplicates?: Array<UpsertContextStatusError>;
 }
@@ -1545,6 +1568,13 @@ export interface BulkIngestionFileStatus {
     status: 'processing' | 'completed' | 'failed';
     /** Present only when status is 'failed': the terminal failure reason. */
     errorMessage?: string;
+    /**
+     * Machine-readable class of a failed file, for outcomes to treat differently from real failures.
+     * `'DUPLICATE_CONTENT'` marks a duplicate found by the deferred extraction pass (a presigned
+     * object's bytes are first read there) — a skip, not a failure: the KB already holds this content.
+     * Additive; absent for ordinary failures.
+     */
+    errorCode?: 'DUPLICATE_CONTENT';
 }
 /**
  * Response describing a bulk-ingestion job's current state and progress counts.

package/dist/internal-common/src/public-types/extraction.public-types.d.ts

@@ -51,6 +51,14 @@ export interface ExtractDataFromDocumentOptions {
      * URL-based extraction ignores it and never returns `documentMetadata`.
      */
     collectDocumentMetadata?: boolean;
+    /**
+     * Safety-net storage expiration (seconds) registered WITH the long-term upload of the original file,
+     * before its bytes land — so a process crash at any later point (mid-OCR, before the caller ever
+     * learns the path) leaves a self-collecting object instead of a permanent orphan. The caller that
+     * sets this owns clearing the expiration once it durably references the path; leaving it unset keeps
+     * the original permanent from the moment it uploads.
+     */
+    originalFileExpirationSeconds?: number;
 }
 /**
  * Request payload for extracting data from a document via URL.
@@ -262,6 +270,11 @@ export interface ExtractDataFromDocumentResponse {
      * Array of pages containing extracted data.
      */
     pages: Array<ExtractDataFromDocumentPage>;
+    /**
+     * Pages the OCR provider reported as processed (billed), when it reports one. Can exceed
+     * `pages.length` — a blank page is billed but returns no content.
+     */
+    ocrPagesProcessed?: number;
     /**
      * Path to the original file in cloud storage, if applicable.
      */

package/dist/internal-common/src/public-types/web.public-types.d.ts

@@ -6,7 +6,9 @@ export interface WebAiSearchRequest {
     query: string;
     /**
      * When provided, restricts the web search to these domains (subdomains are included).
-     * Cited URLs in the response are guaranteed to belong to one of the listed domains.
+     * Cited URLs in the response are guaranteed to belong to one of the listed domains, as are the
+     * consulted ones — see {@link WebAiSearchResponse.consultedUrls} for which of the two Squid
+     * enforces itself.
      */
     allowedDomains?: Array<string>;
 }
@@ -27,6 +29,21 @@ export interface WebAiSearchResponse {
     markdownText: string;
     /** A list of cited URLs included in the search response. */
     citedUrls: Array<WebAiSearchCitedUrl>;
+    /**
+     * Pages the search opened while answering, whether or not the answer cites them. Empty when the
+     * search reached nothing.
+     *
+     * This is what the search did, where {@link citedUrls} is what the answer leans on: a model may
+     * open ten pages and find the fact on one, and it may answer so tersely ("2026-08-16") that it
+     * cites nothing at all. Read this to show where the answer was looked for, or to establish that a
+     * search happened; read {@link citedUrls} to attribute a claim.
+     *
+     * A {@link WebAiSearchRequest.allowedDomains} restriction is applied to this list by Squid rather
+     * than relied upon from the provider, since these pages are reported through a channel the
+     * provider does not document as filtered. Citations arrive already filtered, being drawn from a
+     * restricted answer.
+     */
+    consultedUrls: Array<string>;
 }
 /**
  * Request to fetch content from a URL.

package/dist/typescript-client/src/agent/ai-agent-client-reference.d.ts

@@ -1,5 +1,5 @@
 import { Observable } from 'rxjs';
-import { AiAgent, AiAgentMcpServerConfig, AiChatMessage, AiChatModelSelection, AiConnectedAgentMetadata, AiConnectedIntegrationMetadata, AiConnectedKnowledgeBaseMetadata, AiStatusMessage, AiTranscribeAndAskResponse, AllAiAgentChatOptions, BuildAgentOptions, GenerateAgentMcpDescriptionsResponse, GuardrailsOptions, ListAgentRevisionsResponse, UpsertAgentRequest } from '../../../internal-common/src/public-types/ai-agent.public-types';
+import { AiAgent, AiAgentMcpServerConfig, AiChatMessage, AiChatModelSelection, AiConnectedAgentMetadata, AiConnectedIntegrationMetadata, AiConnectedKnowledgeBaseMetadata, AiPiiOptions, AiStatusMessage, AiTranscribeAndAskResponse, AllAiAgentChatOptions, BuildAgentOptions, GenerateAgentMcpDescriptionsResponse, GuardrailsOptions, ListAgentRevisionsResponse, UpsertAgentRequest } from '../../../internal-common/src/public-types/ai-agent.public-types';
 import { JobId } from '../../../internal-common/src/public-types/job.public-types';
 import { Paths } from '../../../internal-common/src/public-types/typescript.public-types';
 import { AiAskOptions, AiAskOptionsWithVoice, AiChatOptionsWithoutVoice, AskResponse, AskWithVoiceResponse, TranscribeAndAskWithVoiceResponse, TranscribeAndChatResponse } from './ai-agent-client.types';
@@ -52,6 +52,12 @@ export declare class AiAgentReference {
      * Updates the agent's guardrails with the provided options.
      */
     updateGuardrails(guardrails: GuardrailsOptions): Promise<void>;
+    /**
+     * Updates the agent's PII screening. With `onDetect: 'reject'` the agent refuses any prompt
+     * carrying PII before it reaches the model, so the prompt is never answered and never stored.
+     * Merges with the agent's existing PII options.
+     */
+    updatePii(pii: Partial<AiPiiOptions>): Promise<void>;
     /**
      * Updates the agent's MCP server configuration, controlling whether the agent is exposed as an
      * MCP server at `/mcp/<agentId>`. Requires an API key.

package/dist/typescript-client/src/ai-knowledge-base/ai-knowledge-base-client-reference.d.ts

@@ -178,12 +178,12 @@ export declare class AiKnowledgeBaseReference {
      */
     getGraphStatus(): Promise<GetKnowledgeBaseGraphStatusResponse>;
     /**
-     * Enqueues a graph rebuild/backfill. The default `'full'` mode re-extracts every context with an
-     * LLM and rebuilds the concept layer (topics + facets); `mode: 'structural'` keeps the
-     * already-extracted entity graph (extracting only contexts never graph-indexed) and rebuilds just
-     * the concept layer — a small fraction of a full rebuild's LLM cost. Requires `graphRag.enabled`.
-     * Track progress via {@link getGraphStatus}'s `buildJob`; only one rebuild can run per knowledge
-     * base at a time.
+     * Enqueues a graph rebuild/backfill. The default `'structural'` mode keeps the already-extracted
+     * entity graph (extracting only contexts never graph-indexed) and rebuilds just the concept layer
+     * (topics + facets); `mode: 'full'` wipes the graph and re-extracts every context with an LLM —
+     * expensive, and only needed when the extraction itself must be redone (e.g. after changing
+     * `entityTypes` or `extractionModel`). Requires `graphRag.enabled`. Track progress via
+     * {@link getGraphStatus}'s `buildJob`; only one rebuild can run per knowledge base at a time.
      */
     rebuildGraph(request?: Omit<RebuildKnowledgeBaseGraphRequest, 'knowledgeBaseId'>): Promise<void>;
     /**

package/dist/typescript-client/src/ai-status-updates.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/typescript-client/src/index.d.ts

@@ -9,6 +9,7 @@ export * from './ai-image-client';
 export * from './ai-knowledge-base/ai-knowledge-base-client';
 export * from './ai-knowledge-base/ai-knowledge-base-client-reference';
 export * from './ai-matchmaking-client';
+export * from './ai-status-updates';
 export * from './api-client';
 export * from './auth.manager';
 export * from './backend-function.manager';

package/dist/typescript-client/src/version.d.ts

@@ -2,4 +2,4 @@
  * The current version of the SquidCloud client package.
  * @category Platform
  */
-export declare const SQUIDCLOUD_CLIENT_PACKAGE_VERSION = "1.0.487";
+export declare const SQUIDCLOUD_CLIENT_PACKAGE_VERSION = "1.0.489";

package/dist/typescript-client/src/web-client.d.ts

@@ -12,13 +12,15 @@ export declare class WebClient {
     /** Headers for short URL API requests. Only use after asserting apiKey is defined. */
     private get shortUrlHeaders();
     /**
-     * Search the web using AI. Returns a response containing Markdown text and cited URLs.
+     * Search the web using AI. Returns a response containing Markdown text, the URLs the answer cites, and
+     * the pages the search consulted.
      * @param query The keywords or query string to search for.
      * @param abortSignal Optional signal used to abort the underlying request. When the signal aborts, the in-flight
      *                    HTTP request is cancelled and its promise rejects, allowing callers to bound a single call
      *                    without leaking the request.
      * @param allowedDomains Optional list of domains the search is restricted to (subdomains included). When provided,
-     *                       every cited URL in the response belongs to one of the listed domains.
+     *                       every URL in the response — cited or consulted — belongs to one of the listed domains.
+     *                       Squid enforces this over the consulted pages; citations arrive already restricted.
      */
     aiSearch(query: string, abortSignal?: AbortSignal, allowedDomains?: Array<string>): Promise<WebAiSearchResponse>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@squidcloud/client",
-  "version": "1.0.487",
+  "version": "1.0.489",
   "description": "A typescript implementation of the Squid client",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",