@anuma/sdk 6.39.0 → 6.39.2

package/dist/tools/selection/index.cjs

@@ -1177,15 +1177,17 @@ Build ONLY when the user gives an explicit instruction to build, create, generat
 
 Once the user HAS given an explicit build instruction, you are in App Builder mode: you produce polished, production-quality React apps that feel designed \u2014 not generic.
 
-DESIGN: on the initial build, before writing code, briefly state (2-3 sentences) what you want this app to feel like \u2014 name the specific fonts, the palette in hex, and one signature detail. Be concrete: "Fraunces display + Inter body + JetBrains Mono metadata, terracotta #b75432 accent on bone #f3efe6, paper-grain texture via inline SVG noise" is the kind of specificity that anchors the build. Default to nothing: don't pick "safe modern productivity" unless the brief literally asks for utilitarian. On later turns, state a design brief only when the change is visual (a restyle, new theme, or new UI); for a logic, data, or behavior-only change, skip the brief and just make the change.
+DESIGN: on the initial build, before writing code, briefly state (2-3 sentences) what you want this app to feel like \u2014 name the specific fonts, the palette in hex, and one signature detail. Be concrete: "Fraunces display + Inter body + JetBrains Mono metadata, terracotta #b75432 accent on bone #f3efe6, paper-grain texture via inline SVG noise" is the kind of specificity that anchors the build. Default to nothing: don't pick "safe modern productivity" unless the brief literally asks for utilitarian. On later turns, state a design brief only when the change is visual (a restyle, new theme, or new UI); for a text, logic, data, or behavior-only change, skip the brief and just make the change.
+
+EDIT SCOPE: Change only the files and lines required by the current user request. A title rename is a text edit, not a design change. Preserve styles, dependencies, and unrelated logic on text edits. Design feedback does not authorize unrelated edits.
 
 WORKFLOW:
 1. NEVER output code as text or markdown. ALWAYS use tools.
 2. Initial build: state your design brief, then create_file with a "files" array writing ALL files in one call. The preview renders automatically.
 3. patch_file requires read_file for that path earlier in the conversation (or create_file in the same conversation, which counts). read_file output is numbered "42: <text>" \u2014 the prefix is display-only; never copy it into "find". Each "find" must match exactly one location \u2014 include 2-3 lines of surrounding context. Pass multiple patches per call to change distinct locations.
 4. Prefer patch_file for changes to existing files \u2014 surgical, reviewable, preserves surrounding code. Reserve create_file overwrites for substantial restructuring. Inserts: find the line before, replace with that line + the new line. Deletes: empty replace.
-5. After substantial changes, call critique_design first (taste, hierarchy, distinctiveness, weakest decision) and then audit_design (mechanical: tokens, focus states, aria-labels, alt, heading order). Patch what each surfaces. critique catches taste issues no checklist would; audit catches mechanics you'd miss. Run both; act on both.
-6. Before declaring done, call verify_app. The host's preview runtime reports whether your app actually mounted and surfaces any errors it captured \u2014 hallucinated imports, syntax the bundler rejected, undefined components, runtime crashes. If \`rendered\` is false or \`errors\` is non-empty, fix every error before the next message. If the response includes a \`note\` that verify_app isn't wired in this host, skip \u2014 audit + critique are your feedback in that case.
+5. On the initial build, when adding new UI, or after user-requested design changes, call critique_design first and then audit_design. Critique checks taste, hierarchy, and distinctiveness. Audit checks tokens, focus states, aria-labels, alt text, and heading order. Patch only issues within the current user request. For text, logic, or data edits, skip both design tools.
+6. Before declaring done, call verify_app. The host's preview runtime reports whether your app actually mounted and surfaces any errors it captured \u2014 hallucinated imports, syntax the bundler rejected, undefined components, runtime crashes. If \`rendered\` is false or \`errors\` is non-empty, fix every error before the next message. If the response includes a \`note\` that verify_app isn't wired in this host, skip runtime verification. An unavailable runtime verifier does not authorize design changes. Use audit_design and critique_design only for the initial build, adding new UI, or user-requested design changes.
 7. Keep responses to a sentence or two. Exception: when responding to critique_design, write a substantive paragraph per rubric question.
 
 STRUCTURE:
@@ -1529,12 +1531,13 @@ function isCacheExpired(cache, expirationMs = DEFAULT_CACHE_EXPIRATION_MS) {
   if (!cache) return true;
   return Date.now() - cache.timestamp > expirationMs;
 }
-function buildCacheEntry(tools, checksum) {
+function buildCacheEntry(tools, checksum, etag) {
   return {
     tools,
     timestamp: Date.now(),
     version: CACHE_VERSION,
-    ...checksum && { checksum }
+    ...checksum && { checksum },
+    ...etag && { etag }
   };
 }
 function writeLocalStorageCache(entry) {
@@ -1569,19 +1572,36 @@ function shouldRefreshTools(responseChecksum, cache = localStorageToolsCache) {
   const cachedChecksum = getToolsChecksum(cache);
   return cachedChecksum instanceof Promise ? cachedChecksum.then(decide) : decide(cachedChecksum);
 }
-async function fetchServerToolsFromApi(baseUrl, token) {
-  const response = await fetch(`${baseUrl}/api/v1/tools`, {
+async function fetchServerToolsFromApi(baseUrl, authHeaders, etag) {
+  const request = (validator) => fetch(`${baseUrl}/api/v1/tools`, {
     method: "GET",
     headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json"
+      ...authHeaders,
+      "Content-Type": "application/json",
+      ...validator && { "If-None-Match": validator }
     }
   });
+  let response;
+  try {
+    response = await request(etag);
+  } catch (error) {
+    if (!etag || !(error instanceof TypeError)) throw error;
+    etag = void 0;
+    response = await request();
+  }
+  if (etag && response.status === 304) {
+    return { notModified: true };
+  }
   if (!response.ok) {
     throw new Error(`Failed to fetch server tools: ${response.status}`);
   }
   const data = await response.json();
-  return convertServerToolsResponse(data);
+  const responseEtag = response.headers?.get("ETag") ?? void 0;
+  return {
+    notModified: false,
+    ...convertServerToolsResponse(data),
+    ...responseEtag && { etag: responseEtag }
+  };
 }
 async function getServerTools(options) {
   const {
@@ -1613,34 +1633,30 @@ async function getServerTools(options) {
   try {
     const { BASE_URL: BASE_URL2 } = await Promise.resolve().then(() => (init_clientConfig(), clientConfig_exports));
     const effectiveBaseUrl = baseUrl ?? BASE_URL2;
+    const validator = cached && !forceRefresh ? cached.etag : void 0;
+    let authHeaders;
     if (apiKey) {
-      const response = await fetch(`${effectiveBaseUrl}/api/v1/tools`, {
-        method: "GET",
-        headers: {
-          "X-API-Key": apiKey,
-          "Content-Type": "application/json"
-        }
-      });
-      if (!response.ok) {
-        throw new Error(`Failed to fetch server tools: ${response.status}`);
+      authHeaders = { "X-API-Key": apiKey };
+    } else {
+      if (!getToken) {
+        getLogger().warn("[serverTools] No auth method available for fetching tools");
+        return cached?.tools ?? [];
       }
-      const data = await response.json();
-      const { tools: tools2, checksum: checksum2 } = convertServerToolsResponse(data);
-      await persistCache(buildCacheEntry(tools2, checksum2));
-      return tools2;
-    }
-    if (!getToken) {
-      getLogger().warn("[serverTools] No auth method available for fetching tools");
-      return cached?.tools ?? [];
+      const token = await getToken();
+      if (!token) {
+        getLogger().warn("[serverTools] No auth token available for fetching tools");
+        return cached?.tools ?? [];
+      }
+      authHeaders = { Authorization: `Bearer ${token}` };
     }
-    const token = await getToken();
-    if (!token) {
-      getLogger().warn("[serverTools] No auth token available for fetching tools");
-      return cached?.tools ?? [];
+    const result = await fetchServerToolsFromApi(effectiveBaseUrl, authHeaders, validator);
+    if (result.notModified) {
+      const confirmed = cached;
+      await persistCache({ ...confirmed, timestamp: Date.now() });
+      return confirmed.tools;
     }
-    const { tools, checksum } = await fetchServerToolsFromApi(effectiveBaseUrl, token);
-    await persistCache(buildCacheEntry(tools, checksum));
-    return tools;
+    await persistCache(buildCacheEntry(result.tools, result.checksum, result.etag));
+    return result.tools;
   } catch (error) {
     getLogger().error("[serverTools] Failed to fetch server tools:", error);
     if (cached?.tools) {

package/dist/tools/selection/index.d.mts

@@ -141,6 +141,8 @@ interface CachedServerTools {
     version: string;
     /** Checksum from the server for cache invalidation */
     checksum?: string;
+    /** ETag from the server. The next refresh sends it in an If-None-Match header. */
+    etag?: string;
 }
 /**
  * Pluggable persistence for the fetched server-tools list.
@@ -257,7 +259,9 @@ declare function shouldRefreshTools(responseChecksum: string | undefined, cache:
  * Flow:
  * 1. Check the cache backend (localStorage by default; override via `cache`)
  * 2. If cache valid and not force refresh, return cached tools
- * 3. Otherwise, fetch from API, cache, and return
+ * 3. Otherwise, fetch from API, cache, and return. When the cache holds an ETag,
+ *    the request sends If-None-Match. On 304 the cached tools stay and only the
+ *    stored timestamp changes.
  * 4. On fetch failure, return cached tools if available (stale-while-error)
  */
 declare function getServerTools(options: ServerToolsOptions): Promise<ServerTool[]>;

package/dist/tools/selection/index.d.ts

@@ -141,6 +141,8 @@ interface CachedServerTools {
     version: string;
     /** Checksum from the server for cache invalidation */
     checksum?: string;
+    /** ETag from the server. The next refresh sends it in an If-None-Match header. */
+    etag?: string;
 }
 /**
  * Pluggable persistence for the fetched server-tools list.
@@ -257,7 +259,9 @@ declare function shouldRefreshTools(responseChecksum: string | undefined, cache:
  * Flow:
  * 1. Check the cache backend (localStorage by default; override via `cache`)
  * 2. If cache valid and not force refresh, return cached tools
- * 3. Otherwise, fetch from API, cache, and return
+ * 3. Otherwise, fetch from API, cache, and return. When the cache holds an ETag,
+ *    the request sends If-None-Match. On 304 the cached tools stay and only the
+ *    stored timestamp changes.
  * 4. On fetch failure, return cached tools if available (stale-while-error)
  */
 declare function getServerTools(options: ServerToolsOptions): Promise<ServerTool[]>;

package/dist/tools/selection/index.mjs

@@ -1055,15 +1055,17 @@ Build ONLY when the user gives an explicit instruction to build, create, generat
 
 Once the user HAS given an explicit build instruction, you are in App Builder mode: you produce polished, production-quality React apps that feel designed \u2014 not generic.
 
-DESIGN: on the initial build, before writing code, briefly state (2-3 sentences) what you want this app to feel like \u2014 name the specific fonts, the palette in hex, and one signature detail. Be concrete: "Fraunces display + Inter body + JetBrains Mono metadata, terracotta #b75432 accent on bone #f3efe6, paper-grain texture via inline SVG noise" is the kind of specificity that anchors the build. Default to nothing: don't pick "safe modern productivity" unless the brief literally asks for utilitarian. On later turns, state a design brief only when the change is visual (a restyle, new theme, or new UI); for a logic, data, or behavior-only change, skip the brief and just make the change.
+DESIGN: on the initial build, before writing code, briefly state (2-3 sentences) what you want this app to feel like \u2014 name the specific fonts, the palette in hex, and one signature detail. Be concrete: "Fraunces display + Inter body + JetBrains Mono metadata, terracotta #b75432 accent on bone #f3efe6, paper-grain texture via inline SVG noise" is the kind of specificity that anchors the build. Default to nothing: don't pick "safe modern productivity" unless the brief literally asks for utilitarian. On later turns, state a design brief only when the change is visual (a restyle, new theme, or new UI); for a text, logic, data, or behavior-only change, skip the brief and just make the change.
+
+EDIT SCOPE: Change only the files and lines required by the current user request. A title rename is a text edit, not a design change. Preserve styles, dependencies, and unrelated logic on text edits. Design feedback does not authorize unrelated edits.
 
 WORKFLOW:
 1. NEVER output code as text or markdown. ALWAYS use tools.
 2. Initial build: state your design brief, then create_file with a "files" array writing ALL files in one call. The preview renders automatically.
 3. patch_file requires read_file for that path earlier in the conversation (or create_file in the same conversation, which counts). read_file output is numbered "42: <text>" \u2014 the prefix is display-only; never copy it into "find". Each "find" must match exactly one location \u2014 include 2-3 lines of surrounding context. Pass multiple patches per call to change distinct locations.
 4. Prefer patch_file for changes to existing files \u2014 surgical, reviewable, preserves surrounding code. Reserve create_file overwrites for substantial restructuring. Inserts: find the line before, replace with that line + the new line. Deletes: empty replace.
-5. After substantial changes, call critique_design first (taste, hierarchy, distinctiveness, weakest decision) and then audit_design (mechanical: tokens, focus states, aria-labels, alt, heading order). Patch what each surfaces. critique catches taste issues no checklist would; audit catches mechanics you'd miss. Run both; act on both.
-6. Before declaring done, call verify_app. The host's preview runtime reports whether your app actually mounted and surfaces any errors it captured \u2014 hallucinated imports, syntax the bundler rejected, undefined components, runtime crashes. If \`rendered\` is false or \`errors\` is non-empty, fix every error before the next message. If the response includes a \`note\` that verify_app isn't wired in this host, skip \u2014 audit + critique are your feedback in that case.
+5. On the initial build, when adding new UI, or after user-requested design changes, call critique_design first and then audit_design. Critique checks taste, hierarchy, and distinctiveness. Audit checks tokens, focus states, aria-labels, alt text, and heading order. Patch only issues within the current user request. For text, logic, or data edits, skip both design tools.
+6. Before declaring done, call verify_app. The host's preview runtime reports whether your app actually mounted and surfaces any errors it captured \u2014 hallucinated imports, syntax the bundler rejected, undefined components, runtime crashes. If \`rendered\` is false or \`errors\` is non-empty, fix every error before the next message. If the response includes a \`note\` that verify_app isn't wired in this host, skip runtime verification. An unavailable runtime verifier does not authorize design changes. Use audit_design and critique_design only for the initial build, adding new UI, or user-requested design changes.
 7. Keep responses to a sentence or two. Exception: when responding to critique_design, write a substantive paragraph per rubric question.
 
 STRUCTURE:
@@ -1407,12 +1409,13 @@ function isCacheExpired(cache, expirationMs = DEFAULT_CACHE_EXPIRATION_MS) {
   if (!cache) return true;
   return Date.now() - cache.timestamp > expirationMs;
 }
-function buildCacheEntry(tools, checksum) {
+function buildCacheEntry(tools, checksum, etag) {
   return {
     tools,
     timestamp: Date.now(),
     version: CACHE_VERSION,
-    ...checksum && { checksum }
+    ...checksum && { checksum },
+    ...etag && { etag }
   };
 }
 function writeLocalStorageCache(entry) {
@@ -1447,19 +1450,36 @@ function shouldRefreshTools(responseChecksum, cache = localStorageToolsCache) {
   const cachedChecksum = getToolsChecksum(cache);
   return cachedChecksum instanceof Promise ? cachedChecksum.then(decide) : decide(cachedChecksum);
 }
-async function fetchServerToolsFromApi(baseUrl, token) {
-  const response = await fetch(`${baseUrl}/api/v1/tools`, {
+async function fetchServerToolsFromApi(baseUrl, authHeaders, etag) {
+  const request = (validator) => fetch(`${baseUrl}/api/v1/tools`, {
     method: "GET",
     headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json"
+      ...authHeaders,
+      "Content-Type": "application/json",
+      ...validator && { "If-None-Match": validator }
     }
   });
+  let response;
+  try {
+    response = await request(etag);
+  } catch (error) {
+    if (!etag || !(error instanceof TypeError)) throw error;
+    etag = void 0;
+    response = await request();
+  }
+  if (etag && response.status === 304) {
+    return { notModified: true };
+  }
   if (!response.ok) {
     throw new Error(`Failed to fetch server tools: ${response.status}`);
   }
   const data = await response.json();
-  return convertServerToolsResponse(data);
+  const responseEtag = response.headers?.get("ETag") ?? void 0;
+  return {
+    notModified: false,
+    ...convertServerToolsResponse(data),
+    ...responseEtag && { etag: responseEtag }
+  };
 }
 async function getServerTools(options) {
   const {
@@ -1491,34 +1511,30 @@ async function getServerTools(options) {
   try {
     const { BASE_URL: BASE_URL2 } = await import("./clientConfig-WITO4T6L.mjs");
     const effectiveBaseUrl = baseUrl ?? BASE_URL2;
+    const validator = cached && !forceRefresh ? cached.etag : void 0;
+    let authHeaders;
     if (apiKey) {
-      const response = await fetch(`${effectiveBaseUrl}/api/v1/tools`, {
-        method: "GET",
-        headers: {
-          "X-API-Key": apiKey,
-          "Content-Type": "application/json"
-        }
-      });
-      if (!response.ok) {
-        throw new Error(`Failed to fetch server tools: ${response.status}`);
+      authHeaders = { "X-API-Key": apiKey };
+    } else {
+      if (!getToken) {
+        getLogger().warn("[serverTools] No auth method available for fetching tools");
+        return cached?.tools ?? [];
       }
-      const data = await response.json();
-      const { tools: tools2, checksum: checksum2 } = convertServerToolsResponse(data);
-      await persistCache(buildCacheEntry(tools2, checksum2));
-      return tools2;
-    }
-    if (!getToken) {
-      getLogger().warn("[serverTools] No auth method available for fetching tools");
-      return cached?.tools ?? [];
+      const token = await getToken();
+      if (!token) {
+        getLogger().warn("[serverTools] No auth token available for fetching tools");
+        return cached?.tools ?? [];
+      }
+      authHeaders = { Authorization: `Bearer ${token}` };
     }
-    const token = await getToken();
-    if (!token) {
-      getLogger().warn("[serverTools] No auth token available for fetching tools");
-      return cached?.tools ?? [];
+    const result = await fetchServerToolsFromApi(effectiveBaseUrl, authHeaders, validator);
+    if (result.notModified) {
+      const confirmed = cached;
+      await persistCache({ ...confirmed, timestamp: Date.now() });
+      return confirmed.tools;
     }
-    const { tools, checksum } = await fetchServerToolsFromApi(effectiveBaseUrl, token);
-    await persistCache(buildCacheEntry(tools, checksum));
-    return tools;
+    await persistCache(buildCacheEntry(result.tools, result.checksum, result.etag));
+    return result.tools;
   } catch (error) {
     getLogger().error("[serverTools] Failed to fetch server tools:", error);
     if (cached?.tools) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "6.39.0",
+  "version": "6.39.2",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",