@gemmein/sdk 0.8.0 → 0.9.0

package/migrations/raw-calls-off.md

@@ -0,0 +1,51 @@
+# Raw AI calls are off until the owner switches them on
+
+```
+Since: 0.9.0
+Action required by: 0.9.0
+```
+
+## What changed
+
+Before 0.9.0 `g.ai.chat(body)` and `g.ai.text(body)` forwarded the
+provider request the browser composed to any provider the owner had a key
+for. From 0.9.0 that raw call is refused with `403 raw_calls_off` unless the
+owner has switched raw calls on for that provider's key on the AI tools
+page. The cloud applies this to every key, new and existing, from 7 Sep
+2026; the local engine (`gemmein dev`) keeps its keyless fake provider open
+and applies the same rule to a configured key.
+
+The normal path is a named tool: the owner defines it on the AI tools page
+or your AI writes `gemmein/ai/tools/<name>.json` (instructions, prompt
+template, typed inputs, model, caps) and the app calls it with inputs only.
+
+## Who is affected
+
+Apps that call `g.ai.chat` or `g.ai.text` without `tool`, or with a `tool`
+that only prices and gates a browser-composed body. An app that already
+calls `g.ai.run` / `g.ai.runText`, or makes no AI calls, sees no
+difference.
+
+## What to do
+
+Move each call to a named tool. The prompt leaves the browser and lives on
+the tool:
+
+```ts
+// before
+const res = await g.ai.chat({ model: "gpt-4o-mini", messages: [{ role: "user", content: `Summarise: ${text}` }] });
+
+// after — gemmein/ai/tools/summarise.json carries the instructions and
+// "promptTemplate": "Summarise: {{text}}", "inputs": [{ "name": "text", "type": "text", "required": true }]
+const res = await g.ai.run("summarise", { text });
+const answer = await g.ai.runText("summarise", { text });
+```
+
+An owner who wants the raw path back switches raw calls on for that
+provider's key on the AI tools page; the switch is per key and audited.
+
+## How to tell
+
+A 403 with `code: "raw_calls_off"` in the response, `err.code ===
+"raw_calls_off"` in the SDK, and the message naming the provider and the
+switch. On the AI calls record the outcome is `refused` with that reason.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gemmein/sdk",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Gemmein SDK \u2014 passwordless auth, safe storage, and Stripe-driven record flips for AI-built apps. Small enough that one prompt teaches the whole API.",
   "license": "MIT",
   "type": "module",