@mindstudio-ai/remy 0.1.336 → 0.1.337

package/dist/prompt/compiled/sdk-actions.md

@@ -22,6 +22,20 @@ result.content;              // step-specific output
 result.$billingCost;         // cost in credits (if applicable)
 ```
 
+## Where files an action produces end up
+
+Any action that returns a file URL writes to the shared **public** MindStudio CDN by default: unlisted, but readable by anyone holding the URL, and it never expires. Pass a file store as `store` in the options object to write into the app's own storage instead — a private store means the URL only loads for an authorized app session.
+
+```typescript
+const Reports = files.defineStore('reports', { access: 'private' });
+
+const { imageUrl } = await mindstudio.generateImage({ prompt }, { store: Reports });
+```
+
+**Use a store whenever the file belongs to a specific user or is confidential** (a client document, a participant recording, anything the app wouldn't publish). The public default is for marketing images and other genuinely world-readable assets. See the `files` skill.
+
+Inputs are safe either way: a private file or a `shareUrl` handed to an action is read where it sits, and any intermediate the platform needs (transcoding a video, rasterizing a PDF) is staged privately and deleted when the call finishes.
+
 ## Available Actions
 
 ### AI Generation

package/dist/prompt/skills/files.md

@@ -114,13 +114,15 @@ remy-admin files rm --store handoff --key <key> --private               # revoke
 
 ## Generated assets
 
-MindStudio SDK Actions that produce a file (`generateImage`, `generateVideo`, `generateSpeech`, `generatePdf`, `upscaleImage`, …) can optionally write straight into a store — pass the handle as `store` in the options object:
+Every MindStudio SDK Action that produces a file (`generateImage`, `generateVideo`, `generateSpeech`, `generatePdf`, `upscaleImage`, `trimMedia`, `convertPdfToImages`, `screenshotUrl`, `getGmailAttachments`, …) can write straight into a store — pass the handle as `store` in the options object:
 
 ```typescript
 const { imageUrl } = await mindstudio.generateImage({ prompt }, { store: Assets });
 ```
 
-If omitted, files are written to the default global, public MindStudio CDN.
+If omitted, the file goes to the shared public MindStudio CDN, where the URL is unlisted but readable by anyone who has it, forever. **For anything confidential, pass a private store.** That's the one thing to get right here — the default is fine for marketing images and wrong for client material.
+
+**Actions never publish what you give them.** An input that's already one of the app's own files — a private object, a `shareUrl` link, a `/_/files/...` path — is read where it sits, and anything the platform has to convert first (a non-mp4 video, the pages of a PDF, a document an extraction model must fetch) is staged privately and discarded when the call finishes. So handing `extractText` a private contract, or `trimMedia` a private `.mov`, leaves no public copy behind.
 
 ## When public vs private
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindstudio-ai/remy",
-  "version": "0.1.336",
+  "version": "0.1.337",
   "description": "Remy coding agent",
   "repository": {
     "type": "git",