@opengeni/sdk 0.28.2 → 0.32.1

package/README.md

@@ -32,7 +32,7 @@ for await (const event of client.streamEvents(workspaceId, session.id)) {
 }
 ```
 
-Omit `firstPartyMcpTools` for the minimal self-management default. An explicit
+Omit `firstPartyMcpTools` for the complete OpenGeni tool catalog. An explicit
 `[]` exposes no broad first-party tools; attached resources and separately
 selected `files`/`docs` MCP servers are unaffected.
 
@@ -210,9 +210,12 @@ await client.sendApprovalDecision(workspaceId, sessionId, { approvalId, decision
 ## Session tool policy and native web search
 
 Omitting `tools` when creating a top-level session selects the current
-workspace-default capability policy. Supported Responses providers can then
-attach their native bounded web-search tool without requiring a sandbox.
-Passing `tools`, including `[]`, is an intentional fixed narrowing.
+workspace-default capability policy, including the built-in `files` server.
+Passing `tools`, including `[]`, is an intentional fixed narrowing and can
+therefore disable file-download access for that session. OpenGeni's own web UI
+keeps `files` enabled as a hidden default, while API and embedded clients retain
+exact control over the explicit list. Supported Responses providers attach
+their native bounded web-search tool independently of this MCP policy.
 
 Existing explicit sessions are not widened when a new default capability is
 introduced. Opt one in explicitly with the current optimistic-concurrency
@@ -222,14 +225,25 @@ version; the audited change takes effect on its next attempt:
 const session = await client.getSession(workspaceId, sessionId);
 const updated = await client.updateSessionToolPolicy(workspaceId, sessionId, {
   mode: "workspace_default",
-  expectedVersion: session.toolPolicyVersion ?? 1,
+  expectedVersion: session.toolPolicyVersion,
 });
 ```
 
-To keep a fixed MCP allow-list instead, use the backward-compatible explicit
-shape `{ tools, expectedVersion }`. `tool_search` discovers deferred MCP
-schemas; it is not public web search. Unsupported providers do not receive a
-cross-provider, MCP, or sandbox fallback.
+To keep a fixed allow-list, replace both connected MCP servers and individual
+OpenGeni tools atomically:
+
+```ts
+await client.updateSessionToolPolicy(workspaceId, sessionId, {
+  mode: "explicit",
+  tools,
+  firstPartyMcpTools,
+  expectedVersion: session.toolPolicyVersion,
+});
+```
+
+Follow-up Send and Steer requests inherit this session policy and cannot carry
+a private one-turn tool override. `tool_search` discovers deferred MCP schemas;
+it is not public web search.
 
 ## Goals
 
@@ -244,6 +258,11 @@ await client.resumeGoal(workspaceId, sessionId); // resets counters, re-arms con
 `uploadFile` wraps the three-step flow (begin → signed PUT → complete) in one
 call; the lower-level steps are exported for resumable/custom flows.
 
+Browser hosts need no storage credentials or per-application registration.
+OpenGeni authorizes the workspace request and returns a short-lived,
+object-scoped signed URL; operators must configure the private object store to
+allow CORS from `*` so any product embedding the SDK can use that URL.
+
 ```ts
 const file = await client.uploadFile(workspaceId, {
   filename: "incident-notes.md",