@wice24/tars-sdk 0.1.3 → 0.1.5

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { Agent, AgentVersion, ClientTool, CreateAgentInput, FileMeta, McpCredentialInput, McpCredentialStatus, SessionEvent, SessionInfo, SessionListItem, UpdateAgentInput, UploadFileInput, UsageSummary, SessionUsageRow, DailyUsageRow, McpServer, Skill, SkillVersion, ApiKeyInfo } from './types.js';
+import type { Agent, AgentVersion, ClientTool, CreateAgentInput, FileMeta, McpCredentialInput, McpCredentialStatus, SessionEvent, SessionInfo, SessionListItem, UpdateAgentInput, UploadFileInput, UsageSummary, SessionUsageRow, DailyUsageRow, McpServer, Skill, SkillVersion, ApiKeyInfo, ClientIdentity, ClientRole, PlatformStats, Tenant } from './types.js';
 type ToolHandler = (input: any) => unknown | Promise<unknown>;
 export * from './types.js';
 export declare class TarsApiError extends Error {
@@ -135,6 +135,47 @@ export declare class TarsClient {
             ok: boolean;
         }>;
     };
+    /** The client behind this key. `role === 'admin'` is what unlocks `admin.*`. */
+    me(): Promise<ClientIdentity>;
+    readonly admin: {
+        tenants: {
+            list: () => Promise<Tenant[]>;
+            create: (input: {
+                name: string;
+                role?: ClientRole;
+            }) => Promise<{
+                tenant: Tenant;
+                key: {
+                    key: string;
+                    key_prefix: string;
+                };
+            }>;
+            get: (id: string) => Promise<{
+                tenant: Tenant;
+                keys: ApiKeyInfo[];
+            }>;
+            /** Switch a tenant off: its keys stay, every request under them 403s. */
+            disable: (id: string) => Promise<{
+                ok: boolean;
+            }>;
+            enable: (id: string) => Promise<{
+                ok: boolean;
+            }>;
+            createApiKey: (id: string, input?: {
+                name?: string;
+            }) => Promise<{
+                id: string;
+                key: string;
+                key_prefix: string;
+                name: string | null;
+            }>;
+            /** Unlike tenant self-service, this MAY revoke a tenant's last key. */
+            revokeApiKey: (id: string, keyId: string) => Promise<{
+                ok: boolean;
+            }>;
+        };
+        stats: () => Promise<PlatformStats>;
+    };
     readonly completions: {
         create: (input: {
             prompt: string;
@@ -149,6 +190,13 @@ export declare class TarsClient {
             };
         }>;
     };
+    /**
+     * Which model providers this instance is keyed for (`anthropic`, `openai`,
+     * `openrouter`, `custom`). Ask before OFFERING models: a picker listing GPT
+     * models on an instance with no OpenAI key produces turns that all fail at
+     * the provider call.
+     */
+    providers(): Promise<string[]>;
     readonly usage: {
         get: (filter?: {
             from?: string | Date;

package/dist/index.js

@@ -168,6 +168,32 @@ export class TarsClient {
         list: async () => (await this.request('GET', '/v1/api-keys')).keys,
         revoke: (id) => this.request('DELETE', `/v1/api-keys/${id}`),
     };
+    /** The client behind this key. `role === 'admin'` is what unlocks `admin.*`. */
+    me() {
+        return this.request('GET', '/v1/me');
+    }
+    // ── administration (admin-role keys only; 403 admin_required otherwise) ──
+    // Tenants, their keys, and platform-wide stats. A created tenant's first
+    // key — like any minted key — is returned ONCE and never retrievable again.
+    admin = {
+        tenants: {
+            list: async () => (await this.request('GET', '/v1/admin/tenants')).tenants,
+            create: (input) => this.request('POST', '/v1/admin/tenants', {
+                name: input.name,
+                ...(input.role ? { role: input.role } : {}),
+            }),
+            get: (id) => this.request('GET', `/v1/admin/tenants/${id}`),
+            /** Switch a tenant off: its keys stay, every request under them 403s. */
+            disable: (id) => this.request('POST', `/v1/admin/tenants/${id}/disable`),
+            enable: (id) => this.request('POST', `/v1/admin/tenants/${id}/enable`),
+            createApiKey: (id, input) => this.request('POST', `/v1/admin/tenants/${id}/api-keys`, {
+                ...(input?.name ? { name: input.name } : {}),
+            }),
+            /** Unlike tenant self-service, this MAY revoke a tenant's last key. */
+            revokeApiKey: (id, keyId) => this.request('DELETE', `/v1/admin/tenants/${id}/api-keys/${keyId}`),
+        },
+        stats: () => this.request('GET', '/v1/admin/stats'),
+    };
     // Cheap non-session completion (titles and other one-shots) — routed
     // through the same provider seam as agent turns.
     completions = {
@@ -178,6 +204,16 @@ export class TarsClient {
             ...(input.maxTokens ? { max_tokens: input.maxTokens } : {}),
         }),
     };
+    /**
+     * Which model providers this instance is keyed for (`anthropic`, `openai`,
+     * `openrouter`, `custom`). Ask before OFFERING models: a picker listing GPT
+     * models on an instance with no OpenAI key produces turns that all fail at
+     * the provider call.
+     */
+    async providers() {
+        const body = await this.request('GET', '/v1/providers');
+        return body.providers ?? [];
+    }
     usage = {
         // Aggregated token/cost usage for this tenant, with per-model, per-agent,
         // and per-end-user breakdowns. Dates are ISO 8601; sessionId narrows to one

package/dist/types.d.ts

@@ -136,6 +136,51 @@ export interface ApiKeyInfo {
     created_at: string;
     revoked_at: string | null;
 }
+/** `admin` keys may call `client.admin.*`; everything else is a `tenant`. */
+export type ClientRole = 'tenant' | 'admin';
+/** The client behind an API key (GET /v1/me). */
+export interface ClientIdentity {
+    id: string;
+    name: string;
+    role: ClientRole;
+}
+/** All-time counters for one tenant, as the admin console lists them. */
+export interface TenantStats {
+    active_keys: number;
+    agents: number;
+    sessions: number;
+    running_sessions: number;
+    turns: number;
+    input_tokens: number;
+    output_tokens: number;
+    cost_usd: number | null;
+}
+export interface Tenant {
+    id: string;
+    name: string;
+    role: ClientRole;
+    /** Set = switched off: every request under the tenant's keys is a 403. */
+    disabled_at: string | null;
+    created_at: string;
+    stats: TenantStats;
+}
+export interface UsageTotals {
+    sessions: number;
+    turns: number;
+    input_tokens: number;
+    output_tokens: number;
+    cost_usd: number | null;
+}
+export interface PlatformStats {
+    tenants: {
+        total: number;
+        active: number;
+        disabled: number;
+        admins: number;
+    };
+    all_time: UsageTotals;
+    last_30d: UsageTotals;
+}
 export type McpCredentialInput = {
     type: 'bearer';
     token: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@wice24/tars-sdk",
-  "version": "0.1.3",
-  "description": "Client SDK for TARS \u2014 the self-hosted managed-agents platform (sessions, streaming turns, client tools, MCP credentials, skills, files, usage)",
+  "version": "0.1.5",
+  "description": "Client SDK for TARS — the self-hosted managed-agents platform (sessions, streaming turns, client tools, MCP credentials, skills, files, usage, tenant administration)",
   "type": "module",
   "exports": {
     ".": {