@eng-ai/sdk 2.8.10 → 2.9.1

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 All notable changes to `@eng-ai/sdk` will be documented in this file.
 
+## 2.9.1 - 2026-07-15
+
+- Adds `createDesktopLanAuthorization({ serverInstanceId })` for short-lived, audience-bound Desktop LAN sessions.
+
+## 2.9.0 - 2026-07-13
+
+### Added
+
+- `getDesktopBootstrap()` retrieves the signed, metadata-only per-key Desktop policy envelope from `GET /desktop/bootstrap`.
+- Contract coverage for the atomic policy/account-scope/key-status bootstrap request.
+
 ## 2.8.10 - 2026-06-29
 
 ### Added

package/README.md

@@ -95,6 +95,19 @@ console.log(sessions.map((item) => item.id));
 console.log(session.messages.length);
 ```
 
+Desktop LAN authorization (metadata-only):
+
+```js
+const proof = await client.createDesktopLanAuthorization({
+  serverInstanceId: "stable-non-secret-server-id"
+});
+```
+
+The proof is short-lived and audience-bound. It contains identity and the relevant
+Desktop permissions only. Agent definitions, system prompts, tools, documents,
+local chat and BYOK credentials are never included and remain under customer
+custody on the Desktop LAN server.
+
 Desktop private local-context invocation:
 
 ```js

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eng-ai/sdk",
-  "version": "2.8.10",
+  "version": "2.9.1",
   "description": "Official JavaScript SDK for ENG-AI External API v2",
   "type": "module",
   "main": "./src/client.js",

package/src/client.js

@@ -670,6 +670,23 @@ export class EngAIClient {
     });
   }
 
+  async getDesktopBootstrap() {
+    return await this._request("/desktop/bootstrap", {
+      method: "GET",
+    });
+  }
+
+  async createDesktopLanAuthorization({ serverInstanceId } = {}) {
+    const normalizedServerInstanceId = this._requireNonEmptyString(
+      serverInstanceId,
+      "serverInstanceId",
+    );
+    return await this._request("/desktop/lan-authorization", {
+      method: "POST",
+      body: { serverInstanceId: normalizedServerInstanceId },
+    });
+  }
+
   async getDesktopPolicy() {
     return await this._request("/desktop/policy", {
       method: "GET",