@granular-software/sdk 0.4.57 → 0.4.58

package/dist/{spend-DpRRCrAr.d.mts → spend-czRX7l0X.d.mts}

@@ -214,10 +214,29 @@ interface OpenEnvironmentOptions {
     email?: string;
     /**
      * Permission profile names or IDs to ensure before opening the environment.
-     * This should be provided even for existing users so the SDK can guarantee
-     * assignments for first-time environment creation.
+     * Required at runtime when `assignmentMode` is omitted or set to `ensure`.
+     * Ignored by `require-existing`, which never mutates authorization records.
      */
-    permissions: string[];
+    permissions?: string[];
+    /**
+     * How the SDK should handle the subject's ontology assignment.
+     *
+     * `ensure` preserves the historical behavior: permission profiles and the
+     * assignment are created or updated as needed. `require-existing` accepts
+     * only `granularId`, requires a current assignment, and never issues SDK
+     * authorization-setup writes for the selected subject, permission profile,
+     * or assignment. Managed opening can still write default tags,
+     * environments, activations, importer/setup state, sessions, and internal
+     * shared-mount subjects.
+     */
+    assignmentMode?: "ensure" | "require-existing";
+    /**
+     * Optional integrity guard for `require-existing`. Opening fails when the
+     * assignment read by the SDK does not use this permission profile ID. The
+     * control plane rechecks the same expectation while resolving an existing
+     * active environment and atomically when changing the active pointer.
+     */
+    expectedPermissionProfileId?: string;
     /**
      * When true, if the latest environment for this ontology/user/tag is marked
      * outdated relative to the current tag target, create a fresh environment on

package/dist/{spend-DpRRCrAr.d.ts → spend-czRX7l0X.d.ts}

@@ -214,10 +214,29 @@ interface OpenEnvironmentOptions {
     email?: string;
     /**
      * Permission profile names or IDs to ensure before opening the environment.
-     * This should be provided even for existing users so the SDK can guarantee
-     * assignments for first-time environment creation.
+     * Required at runtime when `assignmentMode` is omitted or set to `ensure`.
+     * Ignored by `require-existing`, which never mutates authorization records.
      */
-    permissions: string[];
+    permissions?: string[];
+    /**
+     * How the SDK should handle the subject's ontology assignment.
+     *
+     * `ensure` preserves the historical behavior: permission profiles and the
+     * assignment are created or updated as needed. `require-existing` accepts
+     * only `granularId`, requires a current assignment, and never issues SDK
+     * authorization-setup writes for the selected subject, permission profile,
+     * or assignment. Managed opening can still write default tags,
+     * environments, activations, importer/setup state, sessions, and internal
+     * shared-mount subjects.
+     */
+    assignmentMode?: "ensure" | "require-existing";
+    /**
+     * Optional integrity guard for `require-existing`. Opening fails when the
+     * assignment read by the SDK does not use this permission profile ID. The
+     * control plane rechecks the same expectation while resolving an existing
+     * active environment and atomically when changing the active pointer.
+     */
+    expectedPermissionProfileId?: string;
     /**
      * When true, if the latest environment for this ontology/user/tag is marked
      * outdated relative to the current tag target, create a fresh environment on

package/dist/spend.d.mts

@@ -1 +1 @@
-export { G as GranularSpendContext, l as OpenAIUsageSpendEvent, m as RecordOpenAIUsageSpendOptions, o as RecordOpenAIUsageSpendResult, p as buildOpenAISpendEventId, r as recordOpenAIUsageSpend, t as toGranularHttpBase } from './spend-DpRRCrAr.mjs';
+export { G as GranularSpendContext, l as OpenAIUsageSpendEvent, m as RecordOpenAIUsageSpendOptions, o as RecordOpenAIUsageSpendResult, p as buildOpenAISpendEventId, r as recordOpenAIUsageSpend, t as toGranularHttpBase } from './spend-czRX7l0X.mjs';

package/dist/spend.d.ts

@@ -1 +1 @@
-export { G as GranularSpendContext, l as OpenAIUsageSpendEvent, m as RecordOpenAIUsageSpendOptions, o as RecordOpenAIUsageSpendResult, p as buildOpenAISpendEventId, r as recordOpenAIUsageSpend, t as toGranularHttpBase } from './spend-DpRRCrAr.js';
+export { G as GranularSpendContext, l as OpenAIUsageSpendEvent, m as RecordOpenAIUsageSpendOptions, o as RecordOpenAIUsageSpendResult, p as buildOpenAISpendEventId, r as recordOpenAIUsageSpend, t as toGranularHttpBase } from './spend-czRX7l0X.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@granular-software/sdk",
-  "version": "0.4.57",
+  "version": "0.4.58",
   "description": "TypeScript SDK and CLI for Granular - define, build, and deploy AI sandboxes",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",