Added

• Bind a Managed Session to a BYOC MCP tunnel with tunnel_id at creation. On Forward, set the tunnel on a Template for its sessions to inherit. Managed Deployments also accept and return the binding. Template and Deployment updates can replace or clear it.

• Add typed Forward Session budgets across create/update responses and events, including omission, explicit null clearing and decimal-string limits.

• Add Forward Session config.model overrides and model speed configuration, plus optional approval evaluation details, Outcome/status event fields and cumulative top-level Credits on session.usage.

• Add startup_script to Forward/Managed Environment models and Managed cloud/self-hosted parameters. It runs on sandbox start/resume; the external worker controls self-hosted execution.

• Add Managed Memory version, version redacted, and Vault creation-response credentials fields. Vault creation still does not accept credentials in its request.

Fixed

• Decode Forward evaluated_permission through a string declaration and make event-specific payload fields optional instead of requiring fields from every event variant.
• Align Managed Thread/coordinator exported model helper types with string effort and context windows. Add Memory version updated, retaining modified through a deprecated compatibility type.

Breaking changes

• Forward SessionEvent.evaluated_permission is now string | undefined, and event-specific fields may be absent. The two Managed nested-model helper types now use string effort.

Migration

• Compare event.evaluated_permission directly to "allow", "ask" or "deny"; automatic approval details are under event.evaluation?.evaluated_permission. Check optional event fields before reading them.
• Omit budget to keep the default/current limit; pass null to clear it. Omit the model on create to inherit; update config.model to null to restore inheritance.
• Use the new updated Memory operation for current responses. Legacy Managed nested-model speed remains deprecated. Treat session.usage as cumulative snapshots rather than adding successive events.

Changed

• Remove resource-specific sections and inventories from the README to keep it focused on SDK setup and shared client behavior.

Added

• Add automatic Thread SSE resumption for Forward and Managed, preserving the latest event cursor and request options across retryable disconnects; thread termination stops the subscription while idle events keep it open.
• Add a typed Last-Event-ID parameter to Managed Thread streams.

Added

• Automatically mark direct Forward and Managed Session creation with __qca_sdk_created, __qca_sdk_language, and the actual __qca_sdk_version, preserving caller metadata.
• Add Forward Dreams (create, list, retrieve, cancel, archive), channel pairing list/retrieve/update, and Managed OAuth start with typed requests and responses.
• Add Identity automatic memory-store control, mount access and cursor pagination, sparse managed-capability overrides, and full tools-array replacement.
• Support string Template references and Advisor model entries in Forward Multiagent rosters, Schedule file resources, and optional Run input snapshots.
• Add typed Managed OSS bucket storage with separate write credentials/read views, and Memory Store ID cursor parameters.

Fixed

• Align Forward Outcome rubric objects and Managed Agent/Dream model configuration with the official API. Dream model defaults to auto when omitted; object configuration supports effort and context_window.

Breaking changes

• Session creation rejects conflicting values for the three reserved SDK metadata keys before sending; matching string values remain accepted. Missing or null metadata now contains the markers, which count toward API metadata limits.
• Forward event rubric is a text/content or file/file_id object instead of a string.
• Managed Agent effort is a level string instead of an object; Agent and Dream model configuration no longer declares the unsupported speed field.
• Identity mount list now takes query params before request options and returns PagePromise<MemoryStoreMount>; move existing third-argument request options to the fourth argument.

Migration

• Rename business fields that collide with the three __qca_sdk_ keys and leave space for automatic markers. See “SDK-created Session metadata” in the README.
• Send rubric: {type: 'text', content: '...'} and model: {id: 'ultimate', effort: 'high'}; remove Managed speed fields. See the README's “Official contract alignment” section.

Added

• Forward resource search for Environments, Skills, Vaults, and Files, with PAT Identity scope in the query.
• Managed resource search for Agents, Sessions, Deployments, Environments, Skills, Vaults, Files, and Memory Stores, including typed metadata and resource filters.
• Automatic Search beta headers and POST body cursor pagination that preserves filters and request options across pages.

Changed

• Clarify that the Forward Decision API is in Beta and its behavior may change in future updates.

Breaking changes

• Align Beta Forward Decision responses with the updated API: remove usage, the refusal answer type/field, and internal context fields (policy_version, token_estimator, estimated_input_tokens, max_input_tokens, snapshot_at, scan_limited, truncated, truncation_reasons).

Added

• Add Forward Decisions for synchronous evaluation of explicit state or accessible Session history, with choice and score questions, idempotent creation, retrieval, cursor pagination, and typed context truncation/token-estimate metadata.

Added

• Add Forward Webhook endpoint creation, listing, retrieval, partial update, deletion, enable/disable and synthetic test delivery.
• Add raw-body webhook signature verification with HMAC-SHA256, multiple v1 signatures and a 300-second timestamp window; include receiver examples and offline contracts.

Fixed

• Align existing Managed Session and Deployment resource types with generic HTTP(S) git_repository, including write-only credentials, branch/commit checkout, and optional GitHub authorization for public repositories.
• Add Forward Template max_tool_rounds, Batch ignore_idle_window / queue_reason, and Session list search; preserve omitted, null, false, and zero values according to each API contract.
• Expose Forward Session outcome evaluations and Thread statistics/Credits, Schedule and Run source/input-version metadata, and trigger time boundaries.
• Support Forward MemoryStore creation with a native mount (Identity, Template, and optional access), preserving the create request's idempotency key for retries.
• Expose self-hosted Environment setup scripts, Forward Environment binding metadata, Managed MemoryStore status/count/size, and Dream output file paths.
• Decode flat agent.artifact_delivered fields and diagnostic session.error.error.qoder_error_code in Managed event history, Session SSE, and Thread SSE. No additional API endpoints are introduced.

Migration

• Omitting max_tool_rounds on update preserves the configured limit; null clears it. ignore_idle_window accepts a boolean, with false as the server default.
• Treat an absent Schedule Run input version or Thread usage as unknown, not zero. Use retry_status rather than qoder_error_code to decide whether execution can retry.
• Handle null Skill.latest_version and optional legacy Managed Thread usage in TypeScript consumers.

Fixed

• Align Managed Session budgets with the official decimal-string max_credit_cost contract, shared by Deployment budgets. The limit covers cumulative model and sandbox Credits; reaching it rejects the next user message without interrupting the current turn.
• Expose Managed and Forward Session model_credits, sandbox_runtime_credits, and total_credits; decode top-level session.usage Credits and per-call model_usage.credits / compaction usage.credits. Session usage may be absent. Legacy response token/list-cost fields remain available.
• Route Identity ownership through query parameters on existing Forward Environment, Skill/Version, Vault/Credential, and File operations, including multipart uploads and content downloads.
• Allow existing channel pairing creation with either a code or channel_pairing_id, and expose pairing scope details. No additional API endpoints are introduced.

Migration

• Breaking budget field change: Replace { type: "limit", max_list_cost: {...} } with { type: "limit", max_credit_cost: "100.00" }. Amounts are positive decimal strings, not currency objects. Omitting a budget update preserves the limit; explicit null removes it.
• Consume the three top-level Credits fields from session.usage events. Replace cumulative snapshots rather than adding them; compaction Credits are already included in Session totals.
• Set identity_id in resource params; for methods without params, set it in the existing request-options argument. Use this only with a PAT. With a SAT, omit identity_id; the server infers ownership from the token and rejects explicit values (including an empty string).
• Channel pairing requests must provide exactly one of code or channel_pairing_id; existing code-based calls remain supported.

Added

• Forward Drive Beta: typed directory listing, upload/download signed URLs, entry deletion and Drive clearing, with required Identity scope, independent cursor pagination, service ordering and canonical directory query encoding.
• Template managed_tool_config.enabled_tools in create/update requests and responses, including omission, empty-list and null semantics. Runnable Drive examples keep storage requests separate from QCA authentication; opt-in CN/Global lifecycle tests cover PAT, admin SAT and Identity SAT.