@graph8/sdk 0.357.0 → 0.361.0

package/docs/api/workflows.md

@@ -193,6 +193,14 @@ Send an `Idempotency-Key` header as well for the app-wide guard.
 Every execution in the batch is scoped to the caller's org before it is
 touched; ids belonging to another tenant are simply not found.
 
+A restart runs each workflow as it is NOW. When one has record steps or a
+record trigger, the key needs the object scopes they exercise (403
+``missing_scopes`` refuses the whole batch, nothing restarts), and only the
+workflow's owner or a graph8 admin may restart it: for any other member that
+item is reported in ``failed`` with ``owner_or_admin_required`` while the
+rest of the batch goes ahead. When graph8 cannot confirm who is an admin,
+that item is refused, never guessed, and also reported in ``failed``.
+
 **Input**
 
 | Field | Type | Required | Description |
@@ -319,6 +327,13 @@ const result = await g8.api.workflows.createWorkbench({ body: {} });
 Create a new workflow. Pins ``org_id`` and ``runtime_type='workflow'``
 server-side - the body cannot override either.
 
+The workflow's OWNER is the authenticated caller, never a body field: a
+body ``created_by`` is dropped (see ``voice_owner_headers``). Record steps
+and record triggers run with the owner's record access, so the key must hold
+the object scopes they exercise (403 ``missing_scopes``). A node or trigger
+config that carries the same key in snake_case and camelCase with values
+that disagree is refused (422 ``conflicting_node_keys``): keep one spelling.
+
 Translates the public ``config`` field to voice's internal
 ``skill_config`` before forwarding (see module docstring).
 
@@ -573,6 +588,14 @@ const result = await g8.api.workflows.diffSkillVersions({ path: { action_id: "id
 
 Trigger a workflow run. Returns ``execution_id`` for polling.
 
+A workflow with record steps or a record trigger runs them with its OWNER's
+record access, and this run's input feeds them: the key must hold the object
+scopes they exercise (403 ``missing_scopes``) and its member must own the
+workflow or administer the org (403 ``owner_or_admin_required``, from the
+workflow service, which receives the member as the verified identity). The
+saved workflow is read before the run so that check is never skipped: when
+it cannot be read, the answer is ``502`` and nothing runs.
+
 Pins ``org_id`` server-side; the caller cannot override which org's
 execution row is created. ``triggered_by`` defaults to the caller's
 user id when not supplied.
@@ -1908,6 +1931,14 @@ a paused run instead, use `POST /workflows/executions/{id}/resume`.
 The org is forwarded and voice scopes the lookup by it, so one tenant
 cannot restart another's run.
 
+A restart runs the workflow as it is NOW, with the original or new input.
+When it has record steps or a record trigger, the key needs the object
+scopes they exercise (403 ``missing_scopes``), and only the workflow's
+owner or a graph8 admin may restart it, with reused or new input (403
+``owner_or_admin_required``). When graph8 cannot confirm who is an admin the
+restart is refused, never guessed: the workflow service answers 503, which
+reaches the caller as ``502`` like its other upstream failures; retry later.
+
 **Input**
 
 | Field | Type | Required | Description |
@@ -1941,7 +1972,14 @@ const result = await g8.api.workflows.restartExecution({ path: { execution_id: "
 
 SPENDS NOTHING. Publishes the old snapshot as a NEW version, live for the
 next run - agents and workflows using the skill pick it up. Append-only, so
-the restore can itself be rolled back. Routine-managed skills refuse (403).
+the restore can itself be rolled back. Routine-managed skills refuse (403). A
+restored graph with record steps or a record trigger needs the same object
+scopes as a create or an update (403 ``missing_scopes``), a restored graph
+whose snake_case and camelCase node keys disagree is refused (422
+``conflicting_node_keys``), and a restore that changes such a workflow's
+graph is refused (403 ``owner_or_admin_required``) unless the key's member
+owns the workflow or administers the org. The version's graph is read first
+to run those checks: 404 when it cannot be found (unknown skill or version).
 
 **Input**
 
@@ -2250,7 +2288,13 @@ const result = await g8.api.workflows.updateSkillTestCase({ path: { action_id: "
 - ★ Hand-written: [`g8.workflows.update()`](../sdk-clients.md#g8-workflows-update)
 
 Update a workflow. The voice update endpoint takes ``org_id`` as a
-query param and the partial body in JSON, so we forward both.
+query param and the partial body in JSON, so we forward both. A graph with
+record steps or a record trigger needs the object scopes they exercise
+(403 ``missing_scopes``), like create, and a node or trigger config whose
+snake_case and camelCase keys disagree is refused (422
+``conflicting_node_keys``). On a workflow with record steps or a record
+trigger, only its owner or a graph8 admin may change what it runs (403
+``owner_or_admin_required``); its name and description stay editable.
 
 Translates the public ``config`` field to voice's internal
 ``skill_config`` before forwarding (see module docstring).

package/docs/sdk-clients.md

@@ -3593,7 +3593,7 @@ Create a buyer persona manually (no AI generation). Requires title + website_url
 ### `g8.studio.globalContext`
 
 ```ts
-g8.studio.globalContext: (params?: { category?: string; limit?: number; include_content?: boolean; }) => Promise<{ data: GlobalContextDocument[]; }>
+g8.studio.globalContext: (params?: { category?: string; limit?: number; include_content?: boolean; include_intelligence?: boolean; include_research?: boolean; }) => Promise<{ data: GlobalContextDocument[]; }>
 ```
 
 Org-level Studio documents (brand_brief, value_props, messaging_house, etc.). `include_content` defaults to true server-side, so each document includes its `content` body unless you explicitly pass `include_content: false`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@graph8/sdk",
-  "version": "0.357.0",
+  "version": "0.361.0",
   "description": "graph8 SDK - CRM, enrichment, sequences, campaigns, and tracking for B2B",
   "license": "MIT",
   "author": "graph8 <support@graph8.com> (https://graph8.com)",